CVE-2022-31901

Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the application via two crafted files.

Affected products

Notepad++

Notepad-plus-plus Notepad\+\+

≤ 8.4.3

CVSS 3.1

6.5 MEDIUM

EPSS

1.3% (69th percentile)

Weakness

CWE-787

NVD status

Modified

Published

2023-01-19