1. Home
  2. CVE Database
  3. CVE-2023-40164
MEDIUM · 5.5

CVE-2023-40164

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue i...

Vulnerability Description

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As of time of publication, no known patches are available in existing versions of Notepad++.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Notepad-Plus-PlusNotepad\+\+<= 8.5.6

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2023-40164?

CVE-2023-40164 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingStateMachine::NextStater`. The exploitability of this issue i...

How severe is CVE-2023-40164?

CVE-2023-40164 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-40164?

Check the references section above for vendor advisories and patch information. Affected products include: Notepad-Plus-Plus Notepad\+\+.