CVE-2023-4738

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.1848

Description The issue is a heap-based buffer overflow in the vim text editor, specifically in the vim regsub both function, caused by a dynamic memory buffer overflow. This can allow an attacker to execute arbitrary code.

Recommendations For versions prior to 9.0.1848, update to version 9.0.1848 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vim regsub both function until a patch is available.