CVE-2026-4744

Notepad3 Bundled Oniguruma compile_string_node() Heap Buffer Overflow via Crafted Regex Pattern Allows Arbitrary Code Execution PUBLISHED

Description (CNA)

Out-of-bounds Read vulnerability in rizonesoft Notepad3 (‎scintilla/oniguruma/src modules). This vulnerability is associated with program files regcomp.C‎. This issue affects Notepad3: before 6.25.714.1.

Affected (CNA)

Vendor / product	Versions
rizonesoft / Notepad3	affected 0 before 6.25.714.1

CWE

CWE-125

References

https://github.com/rizonesoft/Notepad3/pull/5392

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.