The vulnerability is a stack buffer overflow in Vim’s socket server code. When the server accepts an unbounded number of client connections, the fd_set and pollfd arrays are overrun, allowing a local process that can connect to the Vim socket to overwrite adjacent stack memory or terminate the Vim process. The flaw is identified as a classic stack-based buffer overflow (CWE‑121) and can be used to alter the execution flow of the Vim editor or cause an interruption in service.

Vim, any version before 9.2.0842. The issue is fixed in v9.2.0842 and later releases. All installations that use the socket server component and listen for local connections are vulnerable.

The CVSS score of 6.8 indicates a moderate severity. The EPSS score is 0.00111, indicating a very low probability of exploitation, yet the flaw can be triggered from a local environment that has permissions to connect to the socket, which is typically a non‑privileged user. The vulnerability is not listed in CISA KEV, yet the local attack vector and stack corruption provide a clear path to potential exploitation. Organizations should treat it as a moderate risk that can become critical if the attacker can also marshal processes to execute arbitrary code via the overwritten return address.