CVE-2023-4752

nvd nist

Published: Sep 4, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Affected (6)

Products: Vim: Vim · Fedoraproject: Fedora · Debian: Debian Linux · +1 more

Show all products

Vim: Vim · Fedoraproject: Fedora · Debian: Debian Linux · Apple: Macos

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vim Vim	Before 9.0.1858

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 37
Fedoraproject Fedora	Version 38
Fedoraproject Fedora	Version 39

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	Before 14.1

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (17)

http://seclists.org/fulldisclosure/2023/Oct/24

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://github.com/vim/vim/commit/ee9166eb3b41846661a39b662dc7ebe8b5e15139

Source: security@huntr.dev

Patch

https://huntr.dev/bounties/85f62dd7-ed84-4fa2-b265-8a369a318757

Source: security@huntr.dev

ExploitIssue TrackingPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/09/msg00035.html

Source: security@huntr.dev

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I56ITJAFMFAQ2G3BMGTCGM3GS62V2DTR/

Source: security@huntr.dev

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITRVK4FB74RZDIGTZJXOZMUW6X6F4TNF/

Source: security@huntr.dev

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PFE3LDFRZ7EGWA5AU7YHYL62ELBOFZWQ/

Source: security@huntr.dev

Mailing List

https://support.apple.com/kb/HT213984

Source: security@huntr.dev

Release NotesThird Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/24