Skip to content

Use-After-Free in win_close()

Low
chrisbra published GHSA-8g46-v9ff-c765 Nov 16, 2023

Package

Vim (Vim)

Affected versions

< v9.0.2106

Patched versions

v9.0.2106

Description

Use-After-Free in win_close()

Date: 16.11.2023
Severity: Low

When closing a window, vim may try to access already freed window
structure. So before trying to access any window related variable
verify that the window to be closed is still valid and if not, return.

Impact is low, since it is not very easy to make use of this
and execute some payload (in particular not, without the
user noticing).

The Vim project would like to thank Fabian Toepfer for reporting this issue
which is now fixed in Vim patch 9.0.2106.

URL: 25aabc2

Severity

Low
3.9
/ 10

CVSS base metrics

Attack vector
Local
Attack complexity
Low
Privileges required
Low
User interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

CVE ID

CVE-2023-48231

Weaknesses

No CWEs