Afang

A logic issue was addressed with improved state management, which could allow a user to be tracked through their IP address.

A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution.

The issue is related to an out-of-bounds read in the Vim text editor, specifically in the `gchar cursor` function of the `misc1.c` component. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to a NULL pointer dereference error in the `vim regexec string()` function of the Vim text editor. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability can be exploited by a remote attacker who tricks the victim into opening a specially crafted file, potentially leading to a denial-of-service (DoS) attack.