A NULL pointer dereference vulnerability was found in Vim’s vim_regexec_string() function of the src/regexp.c file. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a NULL pointer dereference that causes a denial of service.
Untrusted vim scripts with -s [scriptin] are not recommended to run.