CVE-2023-1264

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.1392

Description The issue is related to a NULL Pointer Dereference in the Vim text editor, specifically in the utfc ptr2len function of the mbyte.c component. This could allow an attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 9.0.1392, update to version 9.0.1392 or later to resolve the issue. As a temporary workaround, consider restricting access to the mbyte.c component until a patch is applied.