CVE & CISA-KEV Catalog

CVE-2024-43374

MEDIUM
4.5
CVSS v3
NVD

Description

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.

How to fix

Remediation Available
vimDebian
Fixed in:2:9.1.0698-1CVE-2024-43374
Fixed in:2:9.1.0698-1CVE-2024-43374
vimUbuntu
Fixed in:2:7.4.052-1ubuntu3.1+esm18USN-6993-1
Fixed in:2:7.4.1689-3ubuntu1.5+esm24USN-6993-1
Fixed in:2:8.0.1453-1ubuntu1.13+esm9USN-6993-1
Fixed in:2:8.1.2269-1ubuntu5.24USN-6993-1
Fixed in:2:8.2.3995-1ubuntu2.18USN-6993-1
Fixed in:2:9.1.0016-1ubuntu7.2USN-6993-1
VimWindows application
Affected:9.1.0678Fixed in:9.1.0678Bram Moolenaar et al.

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged

Impact

ConfidentialityLow
IntegrityLow
AvailabilityLow

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Exploit Intelligence

0.35%probability of exploitation in 30 days
27thpercentile

Low risk: more likely to be exploited than 27% of all known CVEs.

References

Vendor Advisory1
Third-Party Advisory2

Related Vulnerabilities

Other CWE-416 (Use After Free) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2019-0708Critical9.8100%KEV + Ransom-
CVE-2021-31166Critical9.8100%KEVFix
CVE-2015-5119Critical9.899%KEV-
CVE-2010-3962High8.197%KEV-
CVE-2015-0313Critical9.896%KEVFix
CVE-2017-9798High7.595%-Fix
Embed a live status badge for CVE-2024-43374
CVE-2024-43374 severity badge

Markdown

[![CVE-2024-43374](https://tridentstack.com/cve/badge/CVE-2024-43374.svg)](https://tridentstack.com/cve/CVE-2024-43374)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-43374"><img src="https://tridentstack.com/cve/badge/CVE-2024-43374.svg" alt="CVE-2024-43374"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-09.