Medium severity4.4NVD Advisory· Published Mar 13, 2025· Updated Jun 17, 2026
CVE-2025-29768
CVE-2025-29768
Description
Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim patch v9.1.1198.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
35- osv-coords33 versionspkg:deb/ubuntu/vim@2:7.4.052-1ubuntu3.1+esm20?arch=source&distro=esm-infra-legacy/trustypkg:deb/ubuntu/vim@2:7.4.1689-3ubuntu1.5+esm26?arch=source&distro=esm-infra/xenialpkg:deb/ubuntu/vim@2:8.0.1453-1ubuntu1.13+esm11?arch=source&distro=esm-infra/bionicpkg:deb/ubuntu/vim@2:8.1.2269-1ubuntu5.31?arch=source&distro=focalpkg:deb/ubuntu/vim@2:8.2.3995-1ubuntu2.23?arch=source&distro=jammypkg:deb/ubuntu/vim@2:9.1.0016-1ubuntu7.6?arch=source&distro=noblepkg:deb/ubuntu/vim@2:9.1.0496-1ubuntu6.4?arch=source&distro=oracularpkg:rpm/opensuse/vim&distro=openSUSE%20Leap%2015.6pkg:rpm/suse/vim&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/vim&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/vim&distro=SUSE%20Manager%20Server%204.3
>= 0+ 32 more
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-17.48.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150500.20.27.1
- (no CPE)range: < 9.1.1406-17.48.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
- (no CPE)range: < 9.1.1406-150000.5.75.1
Patches
Vulnerability mechanics
References
3- github.com/vim/vim/commit/f209dcd3defb95bae21b2740910e6aa7bb940531nvdPatch
- github.com/vim/vim/security/advisories/GHSA-693p-m996-3rmfnvdVendor Advisory
- security.netapp.com/advisory/ntap-20250502-0001/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.