Use after free in utf_ptr2char capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution. Reference: https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425 https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5
Created vim tracking bugs for this issue: Affects: fedora-all [bug 2073014]
Note that this is not a "remote execution" situation; the only way to trigger this is by opening a file with Vim. Yes, potentially Vim could be set up to automatically open untrusted files submitted to it, but under typical use-cases, this would not be considered a remote code execution vulnerability in the same manner of say a server that receives a network packet and can suddenly be taken over by an attacker via the Internet.
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2022:1552 https://access.redhat.com/errata/RHSA-2022:1552
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2022:5242 https://access.redhat.com/errata/RHSA-2022:5242
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-1154