CVE-2023-40031

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.5.6 and prior

Description The issue is related to a heap buffer write overflow in the Utf8 16 Read::convert function, which may lead to arbitrary code execution when a user opens a specially crafted file. This can potentially allow an attacker to execute arbitrary code.

Recommendations For versions 8.5.6 and prior, update to version 8.5.7 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Utf8 16 Read::convert function until a patch is available. Restrict access to potentially vulnerable files to minimize the risk of exploitation.