Skip to main content

Use After Free

CVE-2022-3705

High
7.5/10

Summary

A vulnerability was found in vim versions prior to 9.0.0805 and classified as problematic. Affected by this issue is the function "qf_update_buffer" of the file "quickfix.c" of the component "autocmd Handler". The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. It is recommended to upgrade the affected component.

  • HIGH
  • NETWORK
  • HIGH
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • HIGH

CWE-416 - Use After Free

Use-after-free (UaF) vulnerability occurs when the application is using a pointer to memory that has been freed. Any attempt to read/write to a buffer after it is de-allocated allows memory corruption, sensitive information exposure, and can potentially lead to arbitrary code execution.

References

Advisory Timeline

  • Published