Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-11504.json"