CVE-2026-73071
Publication date 11 August 2026
Last updated 25 August 2026
Ubuntu priority
Description
Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() to refill and free the current buffer, causing the error path to read freed memory instead of reader->js_buf + reader->js_used when an invalid JSON string spans buffers. This issue is fixed in version 9.2.0844.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| vim | 26.04 LTS resolute |
Fixed 2:9.1.2141-1ubuntu4.8
|
| 24.04 LTS noble |
Fixed 2:9.1.0016-1ubuntu7.19
|
|
| 22.04 LTS jammy |
Fixed 2:8.2.3995-1ubuntu2.35
|
|
| 20.04 LTS focal |
Not affected
|
|
| 18.04 LTS bionic |
Not affected
|
|
| 16.04 LTS xenial |
Not affected
|
|
| 14.04 LTS trusty |
Not affected
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
3.3 · Low
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
References
Related Ubuntu Security Notices (USN)
- USN-8657-1
- Vim vulnerabilities
- 20 August 2026