Skip to content
OpenAdvisories
Low USN-7131-1 1 CVE

vim vulnerability

Published Nov 27, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Vim incorrectly handled memory when closing a
buffer, leading to use-after-free. If a user was tricked into opening a
specially crafted file, an attacker could crash the application, leading to
a denial of service.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS vim 2:8.1.2269-1ubuntu5.29
Ubuntu · 22.04 LTS 22.04:LTS vim 2:8.2.3995-1ubuntu2.21
Ubuntu · 24.04 LTS 24.04:LTS vim 2:9.1.0016-1ubuntu7.5
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS vim 2:7.4.052-1ubuntu3.1+esm20
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS vim 2:7.4.1689-3ubuntu1.5+esm26
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS vim 2:8.0.1453-1ubuntu1.13+esm11

Vulnerabilities 1

  • Low 3.9
    CVE-2024-47814

    use-after-free when closing buffers in Vim

    Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new …

    vim vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-47814