VDB
RHSA-2025:8385
RHSA-2025:8385
PUBLISHED
CVSS 7 HIGH
A flaw was found in Vim, where it is vulnerable to a use-after-free in the ins_compl_get_exp function. This flaw allows a specially crafted file to crash software, use unexpected values, or possibly execute code when opened in Vim.
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/discovery/discovery-ui-rhel9@sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644_amd64 as a component of Red Hat Discovery 1.14 | * |
| Red Hat | registry.redhat.io/discovery/discovery-server-rhel9@sha256:f33991d766b618a128fb99fbe4f9b61c5004f7c6aa73b2b38e28d59e56c64d63_amd64 as a component of Red Hat Discovery 1.14 | * |
| Red Hat | registry.redhat.io/discovery/discovery-server-rhel9@sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c_arm64 as a component of Red Hat Discovery 1.14 | * |
| Red Hat | registry.redhat.io/discovery/discovery-ui-rhel9@sha256:c960fa13577db72b52765d6941688f431f61fe38adb717b2d8bb6569e241bc5e_arm64 as a component of Red Hat Discovery 1.14 | * |
Timeline
- Jun 2, 2025 CVE Published
- Aug 2, 2026 CVE Updated
- Aug 2, 2026 Distribution Patch
- Aug 2, 2026 Distribution Patch
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:8385 advisory
- https://access.redhat.com/security/cve/CVE-2023-4752 advisory
- https://access.redhat.com/security/cve/CVE-2024-12087 advisory
- https://access.redhat.com/security/cve/CVE-2024-12088 advisory
- https://access.redhat.com/security/cve/CVE-2024-12133 advisory
- https://access.redhat.com/security/cve/CVE-2024-12243 advisory
- https://access.redhat.com/security/cve/CVE-2024-12747 advisory
- https://access.redhat.com/security/cve/CVE-2024-35195 advisory
- https://access.redhat.com/security/cve/CVE-2024-52005 advisory
- https://access.redhat.com/security/cve/CVE-2024-8176 advisory
- https://access.redhat.com/security/cve/CVE-2025-0938 advisory
- https://access.redhat.com/security/cve/CVE-2025-24528 advisory
- https://access.redhat.com/security/cve/CVE-2025-26465 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342796 issue
- https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8385.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2237311 issue
- https://www.cve.org/CVERecord?id=CVE-2023-4752 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4752 advisory
…and 47 more