{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"libvterm","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NDBFBSEM2RV88DPFS8D155","modified_at":"2026-10-15T21:47:30.870793146Z","published_at":"2019-02-24T14:29:00.283Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-20786","https://security-tracker.debian.org/tracker/CVE-2018-20786"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-20786#Debian:13/libvterm","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-20786"}],"summary":"libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c"}