CVE-2024-41957
MEDIUM EPSS 28.2%
Published Aug 1, 20241y ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Published Aug 1, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality Low
Integrity Low
Availability Low
Threat Intelligence
EPSS Exploit Probability
28.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-415
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| vim | vim | * | <9.1.0647 |
References 5
- seclists.org http://seclists.org/fulldisclosure/2024/Sep/33
- openwall.com http://www.openwall.com/lists/oss-security/2024/08/01/1
- github.com https://github.com/vim/vim/commit/8a0bbe7b8aad6f8da28dee218c01bc8a0185a
- github.com https://github.com/vim/vim/security/advisories/GHSA-f9cr-gv85-hcr4
- security.netapp.com https://security.netapp.com/advisory/ntap-20241129-0007/
Remediation
- github.com https://github.com/vim/vim/commit/8a0bbe7b8aad6f8da28dee218c01bc8a0185a