CVE-2023-1175

A flaw was found in Vim. There is an incorrect calculation of buffer size issue found in Vim’s yank_copy_line() function of the register.c file. This flaw allows illegal memory access when using virtual editing as “startspaces” goes negative. An attacker can trick a user into opening a specially crafted file, triggering an issue that causes an application to crash leading to a denial of service, corrupting memory, and possibly executing code.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.