How many Vim xxd CVEs are in CISA KEV?

None of Vim xxd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Vim xxd vulnerabilities?

Yes — 2 of Vim xxd's CVEs have a known public exploit.

What are the most common weakness types in Vim xxd CVEs?

Vim xxd's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).

What is the average severity of Vim xxd CVEs?

The average CVSS base score across Vim xxd's scored CVEs is 4.8.

Vim xxd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Vim xxd vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Vim xxd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Vim xxd has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 4.8.

Severity and exploitation

How the CVSS severity of Vim xxd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Vim xxd's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of Vim xxd's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Vim xxd version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for Vim xxd; the CVEs below apply to the product without a version pin.

2 CVEs

Sort

vim xxd xxd.c main buffer overflow
CVE-2025-9390
Public exploit
Patch
CWE-120
Medium · CVSS 4.8
EPSS 0.3% (18th pct)2025-08-24
vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
CVE-2025-9389
Public exploit
CWE-119
Medium · CVSS 4.8
EPSS 0.2% (11th pct)2025-08-24

Common weakness types

The CWE weakness categories most often found in Vim xxd CVEs. Follow any weakness for its full explanation.

Other Vim products

Browse vulnerabilities for other products by Vim.

vim272 CVEs vim/vim159 CVEs gvim2 CVEs Neovim1 CVEs netrw1 CVEs tar.vim1 CVEs tar.vim plugin1 CVEs zipplugin.vim1 CVEs

All Vim vulnerabilities

Frequently asked questions

Common questions about Vim xxd vulnerabilities.

How many CVEs does Vim xxd have?: Vim xxd has 2 published CVE records since 2025.
How many Vim xxd CVEs are in CISA KEV?: None of Vim xxd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Vim xxd vulnerabilities?: Yes — 2 of Vim xxd's CVEs have a known public exploit.
What are the most common weakness types in Vim xxd CVEs?: Vim xxd's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).
What is the average severity of Vim xxd CVEs?: The average CVSS base score across Vim xxd's scored CVEs is 4.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Vim xxd vulnerabilities

Get an alert for each new Vim xxd CVE, with AI-written analysis and remediation steps.

Create an account See pricing