CVE-2024-43374

CVE-2024-43374 is a use-after-free vulnerability in the UNIX editor Vim, specifically in versions prior to 9.1.0678, affecting its argument list handling. This flaw can be triggered when a new file is added to the argument list, activating Buf* autocommands that subsequently close the newly opened buffer and its associated window, leading to invalid memory references. The vulnerability is rated Medium severity (CVSS 4.7), with a local attack vector and high attack complexity, primarily resulting in a denial of service (Vim crash) rather than data compromise. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.