CVE-2024-47814

Low

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

In Vim before 9.1.0764, a use-after-free occurs when closing a buffer and a BufWinLeave auto command reopens the same buffer in a new split window.

Risk Assessment

An attacker could exploit this to execute arbitrary code or crash Vim, but impact is low due to specific conditions.

Recommendation

Update Vim to version 9.1.0764 or later.

Original NVD description (English source)

Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the use