What’s Vulnerable › Vulnerabilities

CVE-2025-52939: Potential heap-buffer overflow vulnerability in NotepadNext

• Severity: critical (CVSS 9.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-23 · updated 2026-06-17
• Weakness: CWE-787

Description

Out-of-bounds Write vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files ldebug.C, lvm.C. This issue affects NotepadNext: through v0.11.

References

• https://github.com/dail8859/NotepadNext/commit/3e928d91b8fc8bb5c77801ee8652f41e98d12571
• https://github.com/dail8859/NotepadNext/pull/757/files

Get alerted when CVE-2025-52939 or the next vulnerability affects your stack