VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 1, 2023· Updated Mar 7, 2025

Divide By Zero in vim/vim

CVE-2023-1127

Description

Divide by zero in Vim prior to 9.0.1367 can cause denial of service by crashing when handling zero-width windows.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Divide by zero in Vim prior to 9.0.1367 can cause denial of service by crashing when handling zero-width windows.

Vulnerability

A divide-by-zero vulnerability exists in Vim versions prior to 9.0.1367, specifically in the window handling code when a zero-width window is processed. This can be triggered by manipulating the window layout to create a window with zero width [1].

Exploitation

An attacker with the ability to open a file and resize windows in Vim (e.g., via a crafted file or terminal input) can trigger the divide-by-zero by causing a zero-width window state. No authentication is required beyond local access to Vim [1].

Impact

Successful exploitation results in a crash of Vim, leading to denial of service. No code execution is indicated in the available reference [1].

Mitigation

The issue is fixed in Vim version 9.0.1367, released on [date not specified in references]. Users should update to at least this version. No workaround is documented in the available references [1].

References
  1. patch 9.0.1367: divide by zero in zero-width window · vim/vim@e0f8691

AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

38

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.