CVE-2021-4019: Debian Linux

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

vim is vulnerable to Heap-based Buffer Overflow

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 34 only; version 35 only
• Neovim Neovim: before 0.7.0 (fixed in 0.7.0)
• Vim Vim: before 8.2.3669 (fixed in 8.2.3669)

Published 2021-12-01. Last modified 2026-06-17.