CVE-2026-71394

A flaw was found in GNU Emacs for Android. Improper validation of table header input in the sfntreadtabledirectory function allows a crafted font file to cause the parser to return a structure with uninitialized heap memory. An attacker can deliver a malicious font file, leading to the use of thi...