CVE-2024-47814
vim: use-after-free when closing buffers in Vim
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 8, 2024
Updated · October 22, 2026
Description
A flaw was found in Vim. When closing a buffer visible in a window, a BufWinLeave auto command can trigger a use-after-free if this auto command happens to reopen the same buffer in a new split window. This issue can potentially cause Vim to crash, leading to a denial of service.
Statement
The impact is Low since the user must intentionally configure an uncommon auto command and run some buffer unload commands in order to trigger the issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.9CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
CWE-416 · Use After Free