Remote No

Type Arbitrary code execution

Description

Vim before version 8.2.3611 is vulnerable to a heap-based buffer overflow when using CTRL-W f without finding a file name.

AVG-2572 gvim, vim 8.2.3582-1 Low Vulnerable

https://huntr.dev/bounties/ce6e8609-77c6-4e17-b9fc-a2e5abed052e/
https://github.com/vim/vim/commit/615ddd5342b50a6878a907062aa471740bd9a847