CVE-2018-20786

תיאור (מקור, אנגלית)

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

מדדים

EPSS — סבירות ניצול

3% (אחוזון 100) נכון ל-18/10/2026

CWE

CWE-476

מוצרים מושפעים

leonerd: libvterm

קישורים

• https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8 PatchThird Party Advisory
• https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8 PatchThird Party Advisory
• https://github.com/vim/vim/issues/3711 ExploitThird Party Advisory
• https://github.com/vim/vim/issues/3711 ExploitThird Party Advisory
• https://usn.ubuntu.com/4309-1/
• https://usn.ubuntu.com/4309-1/