libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2018-20786 · Microsoft / collected KEV context

cve-program · CVE-2018-20786

• https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8
• https://github.com/vim/vim/issues/3711
• https://usn.ubuntu.com/4309-1/

No related operational record is retained in the current change model.