{"id":"CVE-2018-20786","title":"libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.","summary":"libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"vendor":"leonerd","product":"libvterm","affected":["libvterm <= 0\\+bzr726"],"published":"2019-02-24","updated":"2026-10-15","sourceUpdated":"2026-10-15T18:17:19.910","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2018-20786","references":[{"url":"https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8","label":"cve@mitre.org"},{"url":"https://github.com/vim/vim/issues/3711","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4309-1/","label":"cve@mitre.org"},{"url":"https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/vim/vim/issues/3711","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4309-1/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T17:41:44.691828Z"},"epss":0.02916,"epssPercentile":0.86941,"ingestedAt":"2026-10-15T18:23:58.402Z","slug":"CVE-2018-20786","body":"## Overview\n\nlibvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.\n\n## Affected\n\n- `libvterm <= 0\\+bzr726`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.6,"exploitation":0,"ransomware":0},"changes":[]}