CVE-2021-3872: Debian Linux

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

vim is vulnerable to Heap-based Buffer Overflow

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 35 only
• Vim Vim: before 8.2.3487 (fixed in 8.2.3487)

Published 2021-10-19. Last modified 2026-06-17.