How many Vim xxd CVEs are in CISA KEV?

None of Vim xxd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Vim xxd vulnerabilities?

Yes — 2 of Vim xxd's CVEs have a known public exploit.

What are the most common weakness types in Vim xxd CVEs?

Vim xxd's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).

What is the average severity of Vim xxd CVEs?

The average CVSS base score across Vim xxd's scored CVEs is 4.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Vim

2 CVEs

Vim xxd Vulnerabilities

Name: Vim xxd vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for xxd by Vim.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

4.8

Avg CVSS

2025–2025

Last updated August 24, 2025

Overview

Vim xxd has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 4.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Vim xxd, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Vim xxd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Vim xxd's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Vim xxd's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Vim xxd version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for Vim xxd; the CVEs below apply to the product without a version pin.

2 CVEs

Sort

vim xxd xxd.c main buffer overflow
CVE-2025-9390
Public exploit
Patch
CWE-120
Medium · CVSS 4.8
EPSS 0.2% (16th pct)2025-08-24
vim memmove-vec-unaligned-erms.S __memmove_avx_unaligned_erms memory corruption
CVE-2025-9389
Public exploit
CWE-119
Medium · CVSS 4.8
EPSS 0.2% (9th pct)2025-08-24

Common weakness types

The CWE weakness categories most often found in Vim xxd CVEs. Follow any weakness for its full explanation.

Other Vim products

Browse vulnerabilities for other products by Vim.

vim260 CVEs vim/vim159 CVEs gvim2 CVEs Neovim1 CVEs netrw1 CVEs tar.vim1 CVEs tar.vim plugin1 CVEs zipplugin.vim1 CVEs

All Vim vulnerabilities

Frequently asked questions

Common questions about Vim xxd vulnerabilities.

How many CVEs does Vim xxd have?: Vim xxd has 2 published CVE records since 2025.
How many Vim xxd CVEs are in CISA KEV?: None of Vim xxd's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Vim xxd vulnerabilities?: Yes — 2 of Vim xxd's CVEs have a known public exploit.
What are the most common weakness types in Vim xxd CVEs?: Vim xxd's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')).
What is the average severity of Vim xxd CVEs?: The average CVSS base score across Vim xxd's scored CVEs is 4.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Vim xxd vulnerabilities

Monitor new Vim xxd vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing