CVE-2023-48231

MediumCVSS 4.3/10Last modified Jun 23, 2026

Description

Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be viable. This issue has been addressed in commit `25aabc2b` which has been included in release version 9.0.2106. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Nov 16, 2023
Last modified: Jun 23, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-482324.3Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and CVE-2023-482334.3Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, ab CVE-2023-482344.3Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. CVE-2023-482354.3Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically thi CVE-2023-482364.3Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. CVE-2023-482374.3Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large val CVE-2023-482387.5joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL-safe means of repre CVE-2023-482397.1Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.1 CVE-2023-48248.8The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logg CVE-2023-482408.8XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a dif CVE-2023-482417.5XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr CVE-2023-482426.5The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the ap