CVE-2026-71394

A flaw was found in GNU Emacs for Android. Improper validation of table header input in the sfntreadtabledirectory function allows a crafted font file to cause the parser to return a structure with uninitialized heap memory. An attacker can deliver a malicious font file, leading to the use of thi...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were discovered in FreeType's Printer Font Binary PFB font-file format parser. If a user loaded a carefully crafted font-file with a program linked against FreeType, it could cause the application to...