CVE-2023-5535 in vim

Prediction

by VulDB Data Team • 10/31/2023

A vulnerability was determined in vim. This affects an unknown part. Executing a manipulation can lead to use after free. The attack can be launched remotely. Upgrading to version 9.0.2010 is able to mitigate this issue. This patch is called 41e6f7d6ba67b61d911f9b1d76325cd79224753d. Upgrading the affected component is recommended.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: Huntr.dev
• Reservation: 10/11/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-242003
• CPE: ready
• CWE: CWE-416 (confirmed)
• CVSS: 7.8 (NVD)
• EPSS: 0.00539
• KEV: no
• Activities: very low
• Sector: Chemical, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-5535
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-5535
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-5535/