Name of the Vulnerable Software and Affected Versions:
Vim versions 9.1.1231 through 9.1.1399
Description:
Vim is a command line text editor. An error during evaluation when processing nested tuples in Vim script can trigger a use-after-free in Vim’s internal tuple reference management. The `tuple unref()` function may access already freed memory due to improper lifetime handling, leading to memory corruption. The exploit requires direct user interaction, as the script must be explicitly executed within Vim.
Recommendations:
Update to Vim version 9.1.1400 or later.