The vulnerability of the tuple_unref() function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the tupleunref function in the Vim text editor is related to buffer overflow in the heap. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2025-55157

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...