VYPR

vifm

by vifm

CVEs (1)

  • CVE-2026-8997MedMay 22, 2026
    risk 0.24cvss epss 0.00

    vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the application lacks a runtime check on the length of history entries in release builds, potentially allowing a crafted long path…