CVE-2026-5525

Notepad++ v8.9.3 contains a stack-based buffer overflow in the file drop handler. Dropping a directory path exactly 259 characters long without a trailing backslash causes the program to append a backslash and null terminator without proper bounds checking, leading to a stack buffer overflow and ...

CVE-2026-5525 Stack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoS

A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backslash and null terminator without proper bounds...

PT-2026-31894

Name of the Vulnerable Software and Affected Versions Notepad++ version 8.9.3 Description A stack-based buffer overflow exists in the file drop handler component. When a user drags and drops a directory path of exactly 259 characters without a trailing backslash, the application appends a backsla...