PT-2023-4780

CVE-2023-40166

Published

2023-08-21

Updated

2023-09-11

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Notepad++ versions 8.5.6 and prior

Description The issue is related to a heap buffer read overflow in the FileManager::detectLanguageFromTextBegining() function. This may potentially be used to leak internal memory allocation information. The exploitability of this issue is not clear.

Recommendations For versions 8.5.6 and prior, update to version 8.5.7 or later to resolve the issue. As a temporary workaround, consider disabling the FileManager::detectLanguageFromTextBegining() function until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Jarlob

Jaroslav Lobačevski

Vendors

Affected products

Weakness enumeration

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')

CWE-122: Heap-based Buffer Overflow