VYPR
← All advisories
Medium severityOSV Advisory· Published Jun 23, 2025· Updated Apr 15, 2026

CVE-2025-52938

CVE-2025-52938

Description

Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C.

This issue affects NotepadNext: through v0.11.

The singlevar() in lparser.c lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.

Affected products

1

Patches

1
66b8a97d9fdf
https://github.com/dail8859/notepadnextvia osv

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

2

News mentions

0

No linked articles in our index yet.