CVE-2022-2345

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0046

Description The issue is related to a use after free error in the skipwhite function of the charset.c component in the Vim text editor. This could allow a remote attacker to access sensitive data, compromise data integrity, and cause a denial of service.

Recommendations For versions prior to 9.0.0046, update to version 9.0.0046 or later to resolve the issue. As a temporary workaround, consider restricting access to the skipwhite function in the charset.c component until a patch is available.