Vim Memory Corruption Vulnerability via Inaccessible Log File Path

A memory corruption vulnerability has been identified in Vim versions through 9.1.1096. The issue arises in the file 'src/main.c' when the '--log' option is used with a path that does not exist or is inaccessible. This vulnerability can be exploited locally, leading to a crash of the Vim application. The problem has been acknowledged in a public GitHub discussion.

Impact

Exploitation of this vulnerability causes Vim to crash, indicating a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by compiling Vim version 9.1.1096 (commit ID 68d0858) with debugging symbols enabled. After compiling, run Vim with the '--log' option followed by a path to a log file that is inaccessible or non-existent. This will trigger a segmentation fault, causing Vim to crash.

Remediation

Users are advised to upgrade to Vim version 9.1.1097, which addresses this vulnerability.