WID-SEC-W-2026-2721

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

GNU Emacs: Mehrere Schwachstellen

view advisory published 2026-08-09

Ein Angreifer kann mehrere Schwachstellen in GNU Emacs ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2026-71394US——
GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a…
CVE-2026-71393US——
GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a True…
CVE-2026-71392US——
GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addi…
CVE-2026-71391US——
GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfnt_vary_simple_glyph() and sfnt_vary_comp…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan