CVE-2023-4733

Description

Use After Free in GitHub repository vim/vim prior to 9.0.1840.

CVSS breakdown

Affected products

• apple / macos14.1
• fedoraproject / fedora37 – 37
• fedoraproject / fedora38 – 38
• fedoraproject / fedora39 – 39
• neovim / neovim0.7.0 – 0.9.2
• vim / vim9.0.1840
• vim / vim/vimunspecified – 9.0.1840

References

• MISChttps://huntr.dev/bounties/1ce1fd8c-050a-4373-8004-b35b61590217
• PATCHhttps://github.com/vim/vim/commit/e1dc9a627536304bc4f738c21e909ad9fcf3974c
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/
• VENDOR_ADVISORYhttps://support.apple.com/kb/HT213984
• MAILING_LISThttp://seclists.org/fulldisclosure/2023/Oct/24