I sincerely hope that these issues are being addressed and will be resolved in a not to distant version of Notepad++. This issue may lead to arbitrary code execution.įor all of the above CVEs, As of time of publication, no known patches are available in existing versions of Notepad++. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in Utf8_16_Read::convert. Potentially, it may be used to leak internal memory allocation information.

The exploitability of this issue is not clear. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in CharDistributionAnalysis::HandleOneChar.

Versions 8.5.6 and prior are vulnerable to global buffer read overflow in nsCodingStateMachine::NextStater. This utility is written in C++ and uses pure Win32 API and STL which ensures a higher execution speed and smaller program size. Potentially, it may be used to leak internal memory allocation information. Notepad++ is a free source code editor that includes support for several programming languages. Versions 8.5.6 and prior are vulnerable to heap buffer read overflow in FileManager::detectLanguageFromTextBegining. The following CVEs have been reported in Notepad++ V8.5.6 and Prior

Notepad++ 8.5.6 free instals