PT-2024-5608 · Vim+4 · Vim+4

Suyueguo · CVE-2024-41965 · Published 2024-08-01 · Updated 2025-07-06

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.1.0648

Description The issue arises from a double-free error in the dialog changed() function when abandoning a buffer. If a user chooses to save a modified buffer without a name, Vim may create a new Untitled file. However, when setting the buffer name to Unnamed, Vim falsely frees a pointer twice, leading to a double-free and possibly a heap-use-after-free, which can cause a crash.

Recommendations For versions prior to 9.1.0648, update to Vim patch v9.1.0648 or later to resolve the issue.

Exploit

Fix

Use After Free

Double Free

Weakness Enumeration

CWE-416

CWE-415

Related Identifiers

ALT-PU-2024-17009

ALT-PU-2024-17133

ALT-PU-2024-17154

ALT-PU-2024-17456

AZL-47355

AZL-47391

BDU:2024-06299

CVE-2024-41965

ECHO-9D28-4449-272C

GHSA-46PW-V7QW-XC2F

OESA-2024-1982

ROSA-SA-2025-2590

SUSE-SU-2025:02226-1

SUSE-SU-2025:02227-1

SUSE-SU-2025:02228-1

SUSE-SU-2025_02226-1

SUSE-SU-2025_02227-1

SUSE-SU-2025_02228-1

Affected Products

Alt Linux

Debian

Red Os

Suse

Vim

References · 41

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41965.json · Exploit
• https://github.com/vim/vim/security/advisories/GHSA-46pw-v7qw-xc2f · Vendor Advisory
• https://github.com/vim/vim/commit/b29f4abcd4b3382fa746edd1d0562b7b48c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-41965 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-41965 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02228-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02227-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-47391 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-41965 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-41965 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-41965 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-41965 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-47355 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1982 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02226-1 · Vendor Advisory