CVE-2022-0413

A flaw was found in vim. The vulnerability occurs due to using freed memory when the substitute uses a recursive function call, resulting in a use-after-free vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution.

Mitigation

Untrusted vim scripts with -s [scriptin] are not recommended to run.