Medium severityOSV Advisory· Published Jun 23, 2025· Updated Apr 15, 2026
CVE-2025-52938
CVE-2025-52938
Description
Out-of-bounds Read vulnerability in dail8859 NotepadNext (src/lua/src modules). This vulnerability is associated with program files lparser.C.
This issue affects NotepadNext: through v0.11.
The singlevar() in lparser.c lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2v0.1, v0.10, v0.11, …+ 1 more
- (no CPE)range: v0.1, v0.10, v0.11, …
- (no CPE)range: <=0.11
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.