A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be exploited. Upgrading to version 9.1.1616 addresses this issue. The patch is identified as eeef7c77436a78cd27047b0f5fa6925d56de3cb0. It is recommended to upgrade the affected component.

An update of the vim package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function     main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The     attack requires a local approach. The exploit has been released to the public and may be exploited.
    Upgrading to version 9.1.1616 addresses this issue. The patch is identified as     eeef7c77436a78cd27047b0f5fa6925d56de3cb0. It is recommended to upgrade the affected component.
    (CVE-2025-9390)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Vim installed on the remote host is 9.1.1459 prior to 9.1.1616. It is, therefore, affected by a vulnerability as referenced in the 17944 advisory.

  - A security flaw has been discovered in vim up to 9.1.1616. Affected by this vulnerability is the function     main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overflow. The     attack requires a local approach. The exploit has been released to the public and may be exploited.     Upgrading to version 9.1.1616 addresses this issue. (CVE-2025-9390)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
261827	Photon OS 5.0: Vim PHSA-2025-5.0-0611	Nessus	PhotonOS Local Security Checks	medium
260429	Linux Distros Unpatched Vulnerability : CVE-2025-9390	Nessus	Misc.	medium
258074	Vim 9.1.1459 < 9.1.1616 XXD Fortify Buffer Overflow (17944)	Nessus	Windows	medium

Detections

Analytics

CVE-2025-9390

medium

Tenable Plugins

medium

medium

medium