The vulnerability is an out-of-bounds write in the spell-file word-count function. It allows a crafted .spl/.sug pair to cause Vim to write past the bounds of a stack array, corrupting the call frame and crashing the editor. This leads to a denial of service but does not provide remote code execution.

The problem affects Vim versions earlier than 9.2.0653. Users of any operating system or architecture running an older Vim build and who load spell suggestions from untrusted files are potentially affected. The official vendor fix is to upgrade to release 9.2.0653 or later.

The CVSS base score of 5.7 indicates moderate severity. Because the EPSS score is not available and the vulnerability is not in the KEV catalog, the likelihood of exploitation is uncertain. The attack vector is inferred to be a local or user-supplied spell file, requiring the user to open a document that triggers spell suggestions; no external network exploitation is documented.