Vulnerability DatabaseCVE-2026-73071
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-73071
Published:August 11, 2026
Updated:August 31, 2026
Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() to refill and free the current buffer, causing the error path to read freed memory instead of reader->js_buf + reader->js_used when an invalid JSON string spans buffers. This issue is fixed in version 9.2.0844.
Affected Packages
https://github.com/vim/vim.git (GITHUB):
Affected version(s) >=v9.2.0511 <v9.2.0844
Fix Suggestion:
Update to version v9.2.0844
Related Resources (5)
https://github.com/vim/vim/releases/tag/v9.2.0844
https://github.com/vim/vim/security/advisories/GHSA-69ch-22ch-r887
https://github.com/vim/vim/commit/f8126294a526aa80c5123eb3079e325daee9ec75
https://nvd.nist.gov/vuln/detail/CVE-2026-73071
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73071.json
Do you need more information?
Contact Us
CVSS v4
Base Score:
4.8
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
NONE
Vulnerable System Integrity
NONE
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Weakness Type (CWE)
Use After Free
CWE-416
EPSS
Base Score:
0.11