Out-of-bounds Read in Text Property Count in Vim < 9.2.0670
56% confidence
Description
The function `get_text_props()` in Vim reads a property count without validating it against the actual data present, leading to potential out-of-bounds reads and crashes when processing crafted undo files.
