A subtle parsing bug in Vim’s Emacs-style tags handling has been assigned CVE-2026-28419: a heap-based buffer underflow that occurs when a malformed tags file places a delimiter at the very start of a line. The flaw is a one-byte, heap-based underflow in the emacs_tags_parse_line() logic in...
A heap-based buffer overflow in Vim’s Emacs-style tags parsing (tracked as CVE-2026-28418) has been disclosed and patched: users should update to Vim 9.2.0074 or later immediately to eliminate a crash-inducing out-of-bounds read that can be triggered by a crafted tags file. (github.com)...