CVE-2025-29768

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published Mar 13, 2025

CWE ID 88

Summary

CVE-2025-29768 is a medium sensitivity vulnerability affecting the Vim text editor. This issue arises when using the zip.vim plugin with specially crafted zip files before version 9.1.1198. The vulnerability could potentially result in data loss. To exploit this, a user must be coerced into opening the malicious archive within Vim and then pressing the 'x' key on a peculiar filename. The issue has been rectified in Vim patch v9.1.1198.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Affected Vendors

Aviakom VIM AVIA

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/4Or_-y
https://www.cve.org/CVERecord?id=CVE-2025-29768
https://nvd.nist.gov/vuln/detail/CVE-2025-29768

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners