CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-02-24

Last modified

2026-10-15

Weaknesses

CWE-476

Affected products

• Libvterm (Leonerd)

References

• https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
• https://github.com/vim/vim/issues/3711
• https://usn.ubuntu.com/4309-1/