CVE-2023-40164
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Notepad++ versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. Exploitation of this vulnerability may lead to leaking internal memory allocation information.
Risk Assessment
Organizations may be at risk of leaking sensitive information, potentially leading to further attacks or data privacy breaches.
Recommendation
It is recommended to update to the latest version of Notepad++ when patches become available and to monitor systems for unauthorized access.
Original NVD description (English source)
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.