CVE-2016-1248: Debian Linux

High severity, CVSS 7.8. EPSS: 25.3% chance of exploitation in the next 30 days.

vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted modeline is opened.

Affected products

• Debian Debian Linux: version 8.0 only
• Vim Vim: up to and including 8.0.0055

Published 2016-11-23. Last modified 2026-06-17.