The vulnerability of the current_quote() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the currentquote function textobject.c in the Vim text editor involves reading data beyond the boundaries of memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Buffer Over-read in function current_quote

Description Buffer Over-read in function currentquote at textobject.c:1801 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC root@fuzz-vm0-187:/home/fuzz/fuzz/vim/afl/src ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

Buffer Over-read in function find_next_quote

Description Buffer Over-read in function findnextquote at textobject.c:1663 POC ./vim -u NONE -X -Z -e -s -S ./poch4s.dat -c :qa! ================================================================= ==1740874==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200000741a at pc 0x0000010f50...