VULNERABILITY INTELLIGENCE

CVE-2024-41957

CVSS score5.3 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2024-08-01
Last modified2026-06-17

Description

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points …