CVE-2023-46246
MediumCVSS 4.0Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Vim has a use-after-free vulnerability in memory allocated in the `ga_grow_inner` function. This issue can occur when using the `:history` command, leading to an integer overflow and potential use-after-free.
Risk Assessment
This vulnerability may lead to unauthorized memory access, posing a risk to data integrity and confidentiality within the system. If exploited, an attacker could execute malicious code.
Recommendation
It is recommended to update Vim to version 9.0.2068 or later to mitigate this vulnerability. Additionally, monitor systems for unauthorized access.
Original NVD description (English source)
Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068.