HCE2-SA-2025-0131 Moderate HCE 2.0 Security Fix(es): Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn_x27;t show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling however may be triggering a redraw, which will access the ScreenLines pointer, even so this variable hasn_x27;t been allocated (since there is no screen). This vulnerability is fixed in 9.1.1043. (CVE-2025-24014) When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual mode before opening other windows and buffers and therefore fix this bug. In addition it does verify that it won_x27;t try to access a position if the position is greater than the corresponding buffer line. Impact is medium since the user must have switched on visual mode when executing the :all ex command. The Vim project would like to thank github user gandalf4a for reporting this issue. The issue has been fixed as of Vim patch v9.1.1003 (CVE-2025-22134) HCE 2.0 vim-common-9.0-1.r30.hce2.aarch64.rpm vim-enhanced-9.0-1.r30.hce2.aarch64.rpm vim-filesystem-9.0-1.r30.hce2.noarch.rpm vim-minimal-9.0-1.r30.hce2.aarch64.rpm vim-common-9.0-1.r30.hce2.x86_64.rpm vim-enhanced-9.0-1.r30.hce2.x86_64.rpm vim-minimal-9.0-1.r30.hce2.x86_64.rpm