Remote No

Type Arbitrary code execution

Description

vim before version 8.2.3428 is vulnerable to a use after free when replacing.

AVG-2391 gvim 8.2.3412-1 Medium Vulnerable

AVG-2390 vim 8.2.3412-1 Medium Vulnerable

https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d/
https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3