Findings

CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related…

Published Feb 24, 2019 · updated Oct 15, 2026 · leonerd libvterm

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 24, 2019 · NIST NVD

    Detected

    libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

  2. Jun 17, 2026 · NIST NVD

    Updated

    libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

  3. Oct 15, 2026 · NIST NVD

    Updated

    libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

Affected

  • cpe leonerd/libvtermversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2018-20786

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2018-20786

    libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

    nvd.nist.gov

References

CVE-2018-20786 · ZeroDay Findings