CVE-2026-71394

GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a struct with uninitialized heap memory in the table directory entries. An attacker can deliver a malicious font file via email, EWW (Emacs Web Wowser), or documents with custom faces, causing Emacs to load it. This leads to the use of uninitialized heap data in subsequent table lookups, potentially resulting in information disclosure, crashes, or arbitrary memory access on 32-bit targets. This issue is fixed after commit 7621ee1d01229d50e5c0cddea6bf0b01095a62cf

• CWE-1284

• https://cert.pl/en/posts/2026/08/CVE-2026-71391
• https://www.gnu.org/savannah-checkouts/gnu/emacs/emacs.html

Published

Aug 10, 2026

Last Modified

Aug 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71389CAI Content Credentials is affected by an Integer Underflow …6.2
• CVE-2026-7139A flaw has been found in Totolink A8000RU 7.1cu.643_b2020052…9.8
• CVE-2026-71390CAI Content Credentials is affected by an Improper Input Val…4
• CVE-2026-71391GNU Emacs for Android contains an off-by-one error in the gv…5.3
• CVE-2026-71392GNU Emacs for Android is vulnerable to an integer overflow i…5.3
• CVE-2026-71393GNU Emacs for Android is vulnerable to an integer overflow i…5.3
• CVE-2026-71396Bendix EC80 Brake ECU uses hard-coded credentials, which cou…5.4
• CVE-2026-71398Adobe Campaign Classic (ACC) is affected by an Incorrect Aut…10
• CVE-2026-71399Adobe XD is affected by a Buffer Overflow vulnerability that…7.8
• CVE-2026-7140A vulnerability has been found in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-71401An integer underflow was found in the DHCPv4 packet capture …5.3
• CVE-2026-71402An out-of-bounds read was found in the DHCPv4 packet capture…5.4