Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Oct 7, 2024 |
| Amazon_linux_2023 | — | Upgrade vim-default-editorUpgrade vim-debuginfoUpgrade xxdUpgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-dataUpgrade vim-enhanced-debuginfoUpgrade vim-minimal-debuginfoUpgrade xxd-debuginfoUpgrade vim-commonUpgrade vim-minimalUpgrade vim-debugsource | Feb 17, 2025 | Oct 7, 2024 |
| Debian | — | Upgrade vim | Mar 17, 2025 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-minimalUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-filesystem | Jan 14, 2025 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystem | Dec 12, 2024 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-filesystemUpgrade vim-enhanced | Dec 12, 2024 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade vim-commonUpgrade vim-enhancedUpgrade vim-filesystemUpgrade vim-minimal | Jan 15, 2025 | Oct 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 7, 2024 |
| Ubuntu | — | Upgrade vim (Ubuntu Pro)Upgrade vim | Nov 28, 2024 | Oct 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub