Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade vim | Aug 8, 2025 | Oct 7, 2024 |
| Amazon_linux_2023 | — | Upgrade vim-filesystemUpgrade vim-default-editorUpgrade vim-debuginfoUpgrade vim-dataUpgrade xxdUpgrade vim-enhanced-debuginfoUpgrade vim-enhancedUpgrade vim-commonUpgrade vim-minimalUpgrade vim-debugsourceUpgrade xxd-debuginfoUpgrade vim-minimal-debuginfo | Feb 17, 2025 | Oct 7, 2024 |
| Debian | — | Upgrade vim | Mar 17, 2025 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade vim-filesystemUpgrade vim-commonUpgrade vim-enhancedUpgrade vim-minimal | Jan 14, 2025 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade vim-minimalUpgrade vim-commonUpgrade vim-filesystemUpgrade vim-enhanced | Dec 12, 2024 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade vim-commonUpgrade vim-minimalUpgrade vim-filesystemUpgrade vim-enhanced | Dec 12, 2024 | Oct 7, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade vim-filesystemUpgrade vim-enhancedUpgrade vim-minimalUpgrade vim-common | Jan 15, 2025 | Oct 7, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 7, 2024 |
| Ubuntu | — | Upgrade vim (Ubuntu Pro)Upgrade vim | Nov 28, 2024 | Oct 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub