CVE-2024-41957

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.0647

Description The issue exists due to a double-free error in the src/alloc.c file, specifically in the tagstack clear entry() function. When a window is closed, the corresponding tagstack data is cleared and freed. However, if the quickfix list belonging to that window points to the same tagstack data, Vim will attempt to free it again, resulting in a double-free/use-after-free access exception. The impact is low, as the user must intentionally execute Vim with several non-default flags, but it may cause a crash of Vim.

Recommendations To resolve the issue, update to Vim version 9.1.0647 or later. As a temporary workaround, consider avoiding the use of non-default flags when executing Vim until a patch is applied.