CVE-2026-71392

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android (affected versions not specified)

Description An integer overflow exists in the sfnt read cmap format 12() function within src/sfnt.c. On 32-bit builds, an unguarded addition during an xmalloc allocation call can wrap around when processing a specially crafted TrueType font file. This leads to a heap buffer overflow write and subsequent heap memory corruption, which may allow for remote code execution. An attacker can trigger this by delivering a malicious font file through email, EWW (Emacs Web Wowser), or documents utilizing custom faces.

Recommendations Apply the fix provided in commit c4e20777c26548722a37b03db93243e83a0d6188.