Description (CNA)
Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C. This issue affects NotepadNext: through v0.11. The singlevar() in lparser.c lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| dail8859 / NotepadNext | affected 0 through v0.11 |
CWE
CWE-125
References
- https://github.com/dail8859/NotepadNext/pull/756
- https://github.com/dail8859/NotepadNext/commit/66b8a97d9fdfd2257996875716f39c18d84e004f
ADP enrichment
No English description supplied.
No references supplied.