Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2023-40031

Description

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++.

POC

Reference

- https://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/

Github

- https://github.com/123papapro/123papapro

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/webraybtl/CVE-2023-40031