Fizz-Is-On-The-Way

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1115 Description: The issue arises when redirecting the output of the `:display` command to a register that is being displayed, leading to a use-after-free. This occurs because Vim frees the register content before storing the new content in the register. The check in the ex display() function is not complete, failing to account for the `+` and `*` registers, which typically represent the X11/clipboard registers. When a clipboard connection is not possible, these registers fall back to using register 0 instead. As a result, Vim does not check these registers, allowing the vulnerability to occur. Recommendations: For versions prior to 9.1.1115, users are advised to upgrade to a newer version to resolve the issue. As a temporary workaround, consider avoiding the use of the `:redir` ex command to redirect screen messages to registers that are being displayed. Additionally, restrict access to the `+` and `*` registers when using the `:display` command to minimize the risk of exploitation. At the moment, there are no known workarounds for this vulnerability other than upgrading to a patched version.

**Name of the Vulnerable Software and Affected Versions** Vim versions prior to 9.1.1043 **Description** A segmentation fault was found in Vim. In silent Ex mode (-s -e), Vim typically doesn't show a screen and just operates silently in batch mode. However, it is still possible to trigger the function that handles the scrolling of a gui version of Vim by feeding some binary characters to Vim. The function that handles the scrolling may be triggering a redraw, which will access the `ScreenLines` pointer, even though this variable hasn't been allocated. **Recommendations** For Vim versions prior to 9.1.1043, update to version 9.1.1043 or later to resolve the issue. As a temporary workaround, consider avoiding the use of silent Ex mode (-s -e) until the update is applied.

**Name of the Vulnerable Software and Affected Versions** HarfBuzz versions 8.5.0 through 10.0.1 **Description** HarfBuzz is a text shaping engine. There is a heap-based buffer overflow in the `hb cairo glyphs from buffer` function. This issue may allow a remote attacker to execute arbitrary code on the target system. **Recommendations** For HarfBuzz versions 8.5.0 through 10.0.1, consider disabling the `hb cairo glyphs from buffer` function until a patch is available. Restrict access to the `hb-cairo.cc` module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.