VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 4, 2023· Updated Nov 3, 2025

Use After Free in vim/vim

CVE-2023-4752

Description

Use-after-free in vim prior to 9.0.1858 could allow arbitrary code execution via crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Use-after-free in vim prior to 9.0.1858 could allow arbitrary code execution via crafted file.

Vulnerability

A use-after-free vulnerability exists in vim, the popular text editor, in versions prior to 9.0.1858. The flaw occurs during the parsing of specially crafted files, leading to a use-after-free condition in memory management.

Exploitation

An attacker can exploit this vulnerability by convincing a user to open a malicious file with vim. No additional privileges are required beyond the ability to open a file. The attacker does not need network access if the file is delivered locally.

Impact

Successful exploitation could lead to unexpected application termination or arbitrary code execution in the context of the user running vim. This could allow an attacker to execute arbitrary commands or gain control of the system.

Mitigation

The vulnerability is fixed in vim version 9.0.1858. Users should update to this version or later. For systems where updating is not immediately possible, avoid opening untrusted files with vim.

AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

33

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.