medium5.1
CVE-2025-52938
Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules).
Impact
Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C. This issue affects NotepadNext: through v0.11. The singlevar() in lparser.c lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
Affected products
| Product | Affected versions |
|---|---|
| NotepadNext | through 0.11. |
Versions were read from the advisory text. No structured product data has been published for this record yet.