CVE-2024-47814

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.0764

Description: The issue is related to a use-after-free problem in the BufWinLeave function of the Vim text editor. This occurs when a buffer is closed and the BufWinLeave auto command is triggered, potentially causing the same buffer to be reopened in a new split window. The impact is considered low, as it requires a specific setup and intentional actions by the user. However, it may lead to a crash. There are no known instances of this issue being exploited in real-world attacks.

Recommendations: For versions prior to 9.1.0764, upgrade to version 9.1.0764 or later to resolve the issue. As a temporary workaround, consider disabling the BufWinLeave auto command until a patch is available. Avoid using the BufWinLeave auto command in scenarios where it may cause a buffer to be reopened in a new split window.