CVE-2023-40031
HIGHNotepad++ < 8.5.6 - Heap-based Buffer Overflow in Utf8_16_Read::convert
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-40031. PoCs published by webraybtl.
AI-analyzed exploit summary This repository provides a technical analysis of CVE-2023-40031, a heap buffer overflow vulnerability in Notepad++'s Utf8_16_Read::convert function during UTF-16 to UTF-8 conversion. It includes details on the root cause, affected versions, and reproduction environment but lacks actual exploit code.
Description
Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write overflow in `Utf8_16_Read::convert`. This issue may lead to arbitrary code execution. As of time of publication, no known patches are available in existing versions of Notepad++.
Exploits (1)
This repository provides a technical analysis of CVE-2023-40031, a heap buffer overflow vulnerability in Notepad++'s Utf8_16_Read::convert function during UTF-16 to UTF-8 conversion. It includes details on the root cause, affected versions, and reproduction environment but lacks actual exploit code.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H