CVE-2024-47814

Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-416

• https://github.com/vim/vim/commit/51b62387be93c65fa56bbabe1c3Patch
• https://github.com/vim/vim/security/advisories/GHSA-rj48-v4mq-j4vgVendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html
• https://security.netapp.com/advisory/ntap-20250411-0009/Third Party Advisory

Published

Oct 7, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47808A vulnerability has been identified in SINEC NMS (All versio…6.5
• CVE-2024-47809In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-4781A denial-of-service vulnerability was reported in some Lenov…6.5
• CVE-2024-47810A use-after-free vulnerability exists in the way Foxit Reade…8.8
• CVE-2024-47812ImportDump is an extension for mediawiki designed to automat…6
• CVE-2024-47813Wasmtime is an open source runtime for WebAssembly. Under ce…2.9
• CVE-2024-47815IncidentReporting is a MediaWiki extension for moving incide…6
• CVE-2024-47816ImportDump is a mediawiki extension designed to automate use…6.4
• CVE-2024-47817Lara-zeus Dynamic Dashboard simple way to manage widgets for…6.1
• CVE-2024-47818Saltcorn is an extensible, open source, no-code database app…6.5
• CVE-2024-47819Umbraco, a free and open source .NET content management syst…8.7
• CVE-2024-4782A denial-of-service vulnerability was reported in some Lenov…6.5