Folder: en/1-Day-Analysis
2 items under this folder.
1-Day Analysis
1-Day Analysis Analysis of known / disclosed vulnerabilities in open-source projects.
static size_t nSkip = 0;
m_pBuf = (ubyte*)buf;
m_nLen = len;
m_nNewBufSize = 0;
if (m_bFirstRead == true)
{
determineEncoding(); // detect the encoding hereCVE-2023-40031 — Notepad++ Heap Buffer Overflow in UTF-16 → UTF-8 Conversion
SeverityHigh (CVSS 7.8)TypeCWE-122 (Heap-based Buffer Overflow) / CWE-787 (Out-of-bounds Write)CVECVE-2023-40031AffectedNotepad++ ≤ 8.5.6 (analyzed on v8.5.2)Patched8.5.7Affected filePowerEditor/src/Utf8_16.cpp → Utf8_16_Read::convert()CreditGitHub Security Lab (GHSL-2023-092)AdvisoryGHSL-2023-092 ...