The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
{ "vanir_signatures": [ { "source": "https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421", "signature_version": "v1", "signature_type": "Line", "deprecated": false, "target": { "file": "src/window.c" }, "digest": { "line_hashes": [ "8993374588444142046204985725761421241", "1899505930097774466640795324018095017", "249073316609662447104393812658829913899", "260641238213725947044821300861757452760", "26078658833832316793548050621173778884", "133787355157028241164519419296537599806", "285483966402064894838252283230738933032", "112020568909869822655913587903999635263" ], "threshold": 0.9 }, "id": "CVE-2019-20079-9e3a9ec8" }, { "source": "https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421", "signature_version": "v1", "signature_type": "Function", "deprecated": false, "target": { "file": "src/window.c", "function": "win_enter_ext" }, "digest": { "function_hash": "197932960280003161102166363574294990829", "length": 2281.0 }, "id": "CVE-2019-20079-c3dc6cb2" }, { "source": "https://github.com/vim/vim/commit/ec66c41d84e574baf8009dbc0bd088d2bc5b2421", "signature_version": "v1", "signature_type": "Line", "deprecated": false, "target": { "file": "src/version.c" }, "digest": { "line_hashes": [ "146200493773228420153804765641940418619", "41318408147854937763097615485168723658", "154253273328064091945022809287679871050", "62793648622964961538694293074836760648" ], "threshold": 0.9 }, "id": "CVE-2019-20079-e6b204f2" } ] }