The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-vim | Oct 1, 2024 | Aug 15, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-vim-commonamazon-linux-2023-upgrade-vim-dataamazon-linux-2023-upgrade-vim-debuginfoamazon-linux-2023-upgrade-vim-debugsourceamazon-linux-2023-upgrade-vim-default-editoramazon-linux-2023-upgrade-vim-enhancedamazon-linux-2023-upgrade-vim-enhanced-debuginfoamazon-linux-2023-upgrade-vim-filesystemamazon-linux-2023-upgrade-vim-minimalamazon-linux-2023-upgrade-vim-minimal-debuginfoamazon-linux-2023-upgrade-xxdamazon-linux-2023-upgrade-xxd-debuginfo | Feb 17, 2025 | Aug 16, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Aug 16, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-vim-commonhuawei-euleros-2_0_sp10-upgrade-vim-enhancedhuawei-euleros-2_0_sp10-upgrade-vim-filesystemhuawei-euleros-2_0_sp10-upgrade-vim-minimal | Nov 11, 2024 | Aug 16, 2024 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-vim-commonhuawei-euleros-2_0_sp11-upgrade-vim-enhancedhuawei-euleros-2_0_sp11-upgrade-vim-filesystemhuawei-euleros-2_0_sp11-upgrade-vim-minimal | Dec 12, 2024 | Aug 16, 2024 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-vim-commonhuawei-euleros-2_0_sp12-upgrade-vim-enhancedhuawei-euleros-2_0_sp12-upgrade-vim-filesystemhuawei-euleros-2_0_sp12-upgrade-vim-minimal | Nov 26, 2024 | Aug 16, 2024 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-vim-commonhuawei-euleros-2_0_sp9-upgrade-vim-enhancedhuawei-euleros-2_0_sp9-upgrade-vim-filesystemhuawei-euleros-2_0_sp9-upgrade-vim-minimal | Nov 11, 2024 | Aug 16, 2024 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Aug 16, 2024 | |
| Suse | — | suse-upgrade-gvimsuse-upgrade-vimsuse-upgrade-vim-datasuse-upgrade-vim-data-commonsuse-upgrade-vim-smallsuse-upgrade-xxd | Dec 5, 2025 | Dec 16, 2024 |
| Ubuntu | ubuntu-pro-upgrade-vimubuntu-upgrade-vim | Sep 6, 2024 | Aug 16, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub