CyberRota Analysis
AI-GeneratedVim versions from 9.2.0469 to 9.2.0843 are vulnerable to an out-of-bounds read and conditional write due to improper handling of negative window row values in the popup_mark_opacity_zindex() function. This vulnerability could lead to potential information disclosure or application instability. Users and administrators of affected Vim versions should prioritize upgrading to version 9.2.0843 or later to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for w_popup_topoff and causing an out-of-bounds read and conditional write. This issue is fixed in version 9.2.0843.