Is CVE-2026-71393 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-71393 being exploited in the wild.

How severe is CVE-2026-71393?

Informational severity, with a CVSS score of 7.5, published 10 August 2026.

Is there a fix for CVE-2026-71393?

A patch was published on 2026: Fix applied in commit d51a4722316efe0960994d371e1859099894d1ca Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-71393 attacked?

It is attacked over the network or from the adjacent network or with local access.

Am I affected by CVE-2026-71393?

Check whether you run Gnu Emacs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-71393: GNU Emacs integer overflow in sfnt_read_name_table

CVE-2026-71393 · Severity: info · CVSS 7.5 · Published 2026-08-10

GNU Emacs for Android can load TrueType font files from various sources including email attachments and web content. A malicious font file with a specially crafted header can trigger an integer overflow when calculating memory allocation, resulting in heap corruption and potential execution of attacker code. This could allow unauthorized access to system resources or data on affected devices.

Technologies: Gnu Emacs. Vendors: Gnu.

Quick answers

Is CVE-2026-71393 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-71393 being exploited in the wild.
How severe is CVE-2026-71393?: Informational severity, with a CVSS score of 7.5, published 10 August 2026.
Which products and versions are affected?: Gnu Emacs through 30.2.
Is there a fix for CVE-2026-71393?: A patch was published on 2026: Fix applied in commit d51a4722316efe0960994d371e1859099894d1ca Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-71393 attacked?: It is attacked over the network or from the adjacent network or with local access.
Am I affected by CVE-2026-71393?: Check whether you run Gnu Emacs at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is an integer overflow (CWE-190) in the sfnt_read_name_table() function in src/sfnt.c. The function computes an allocation size using a 32-bit length value from a TrueType font file without performing overflow checks. On 32-bit targets, a crafted font causes this calculation to wrap around, resulting in an undersized heap allocation. A subsequent read() call then writes beyond the allocated buffer boundaries, causing a heap buffer overflow. An attacker can deliver a malicious font file via email, the EWW web browser, or documents with custom faces, causing Emacs to load and parse it. The fix was applied in commit d51a4722316efe0960994d371e1859099894d1ca.

Affected products

GNU Emacs through 30.2

Timeline

2026-08-10: disclosed: CVE-2026-71393 published
2026: patched: Fix applied in commit d51a4722316efe0960994d371e1859099894d1ca

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.