vim is vulnerable to use-after-free. The vulnerability exists in append_command
which allows an attacker to cause a memory corruption which then leads to an application crash.
seclists.org/fulldisclosure/2022/Oct/28
seclists.org/fulldisclosure/2022/Oct/41
github.com/vim/vim/commit/d88934406c5375d88f8f1b65331c9f0cab68cc6c
huntr.dev/bounties/40f1d75f-fb2f-4281-b585-a41017f217e2
lists.debian.org/debian-lts-announce/2022/05/msg00022.html
lists.debian.org/debian-lts-announce/2022/11/msg00009.html
lists.fedoraproject.org/archives/list/[email protected]/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/
lists.fedoraproject.org/archives/list/[email protected]/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/
lists.fedoraproject.org/archives/list/[email protected]/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/
security-tracker.debian.org/tracker/CVE-2022-1616
security.gentoo.org/glsa/202208-32
security.gentoo.org/glsa/202305-16
support.apple.com/kb/HT213488