(Fix #14052 )įix eventual memory leak while reading Utf8-16 files. (Fix #14099 )Ĭhange the slogan in installer. Security enhancement: Sign uninstall.exe. The discovered vulnerabilities involve heap buffer write and read overflows in various functions and libraries used by Notepad++.įix 4 security issues CVE-2023-40031, CVE-2023-40036, CVE-2023-40164 & CVE-2023-40166.
GitHub's security researcher Jaroslav Lobačevski reported the vulnerabilities in Notepad++ version 8.5.2 to the developers over the last couple of months. Notepad++ version 8.5.7 has been released with fixes for multiple buffer overflow zero-days, with one marked as potentially leading to code execution by tricking users into opening specially crafted files. Notepad++ 8.5.7 released with fixes for four security vulnerabilities
