CVE-2023-48231
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk47th percentile — higher than 47% of all known CVEs
Summary
Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure.
Risk Assessment
Exploitation of this vulnerability may lead to application crashes, but it has not been shown that other forms of exploitation are viable. Organizations should be aware of potential stability issues.
Recommendation
It is recommended to upgrade to version 9.0.2106, where the issue has been addressed. There are no known workarounds for this vulnerability.
Original NVD description (English source)
Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.