CVE-2023-4733

A flaw was found in Vim, where it is vulnerable to a use-after-free in the buflistaltfpos function. This flaw allows a specially crafted file to crash software, use unexpected values, or possibly execute code when opened in Vim...

Heap-use-after-free in function buflist_altfpos in vim

Description Heap-use-after-free in function buflistaltfpos at buffer.c:3703 Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf -c :qa! ==1404==ERROR: AddressSanitizer: heap-use-after-free on address 0x625000011940 at pc 0x0000004a4dbe bp 0x7ffc6204d090 sp 0x7ffc6204d080 READ of...