未評価
Potential heap-based buffer over-read vulnerability in NotepadNext
CVE-2025-52938
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C.
This issue affects NotepadNext: through v0.11.
The singlevar() in lparser.c lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com