Skip to content
OpenAdvisories
Medium WID-SEC-2026-2721 4 CVEs

GNU Emacs: Mehrere Schwachstellen

Published Aug 9, 2026 · Updated Aug 10, 2026 · Revision 2 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in GNU Emacs ausnutzen, um Informationen offenzulegen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

Product

GNU Emacs ist Texteditor, welcher durch eine Programmierschnittstelle in der Programmiersprache Emacs Lisp mit beliebigen Erweiterungen ausgestattet werden kann.

Vulnerabilities 4

  • Medium 5.3
    CVE-2026-71391

    Off-by-One Error in GNU Emacs for Android

    GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfnt_vary_simple_glyph() and sfnt_vary_compound_glyph() uses a strict greater-than comparison instead of greater-than-or-e…

    GNU Emacs xemacs21-packages xemacs21 Ubuntu
  • Medium 5.3
    CVE-2026-71392

    Integer Overflow in GNU Emacs for Android

    GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a he…

    GNU Emacs xemacs21-packages xemacs21 Ubuntu
  • Medium 5.3
    CVE-2026-71393

    Heap Buffer Overflow in GNU Emacs for Android

    GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without overflow checking. On 32-bit targets, a crafted font cau…

    GNU Emacs xemacs21-packages xemacs21 Ubuntu
  • Medium 5.3
    CVE-2026-71394

    Heap Use of Uninitialized Memory in GNU Emacs for Android

    GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actu…

    GNU Emacs xemacs21-packages xemacs21 Ubuntu

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-55258, EUVD-2026-55257, EUVD-2026-55259, EUVD-2026-55260

  2. #1

    Initiale Fassung

References