The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
{ "binaries": [ { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-athena" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-common" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-gnome" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-gtk" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-gtk3" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-gui-common" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-nox" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-runtime" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "vim-tiny" }, { "binary_version": "2:8.0.1453-1ubuntu1.3", "binary_name": "xxd" } ], "availability": "No subscription required" }