CVE-2022-0443

Related Vulnerabilities: CVE-2022-0443  

A flaw was found in vim. The vulnerability occurs due to using freed memory which results in a use-after-free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.

Description

A flaw was found in vim. The vulnerability occurs due to using freed memory which results in a use-after-free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.

Additional Information

  • Bugzilla 2050182: CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  • CWE-416: Use After Free
  • FAQ: Frequently asked questions about CVE-2022-0443