Summary
It was discovered that Emacs improperly handled specially crafted SVG
images, resulting in memory corruption. An attacker could possibly use
this issue to cause Emacs to crash, resulting in a denial of service, or
obtain sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | emacs | 1:29.3+1-1ubuntu2+esm4 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | emacs | 1:30.2+1-2ubuntu1+esm1 |
Vulnerabilities 1
-
Medium 6.1
Emacs: emacs: memory corruption vulnerability when processing svg css
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG (Scalable Vector Graphics) CSS (Cascading Style Sheets) data. A local user could exploit this by convincing a victim to open a mali…
References
-
report
https://ubuntu.com/security/CVE-2026-6861