CVE-2026-71392 Integer Overflow in GNU Emacs for Android

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

CVE-2026-71392 Integer Overflow in GNU Emacs for Android

GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can...

CVE-2026-71392

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-71391

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

CVE-2026-71391 Off-by-One Error in GNU Emacs for Android

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...

Linux Distros Unpatched Vulnerability : CVE-2026-71394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the...

Linux Distros Unpatched Vulnerability : CVE-2026-71391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared- coordinate index boundary check in sfntvarysimpleglyph an...

Linux Distros Unpatched Vulnerability : CVE-2026-71392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in the sfntreadcmapformat12 function in src/sfnt.c. When processing a crafted TrueType font file, an...

Linux Distros Unpatched Vulnerability : CVE-2026-66485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based ...

PT-2026-69441

Name of the Vulnerable Software and Affected Versions GNU cpio affected versions not specified Description An uncontrolled memory allocation exists in the make path function within src/makepath.c. The function utilizes alloca to allocate stack memory based on the length of the argpath variable,...

Linux Distros Unpatched Vulnerability : CVE-2026-71393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Emacs for Android is vulnerable to an integer overflow in sfntreadnametable in src/sfnt.c. The function computes an allocation size using a 32-bit length...

PT-2026-69440

Name of the Vulnerable Software and Affected Versions GNU cpio affected versions not specified Description Path Traversal exists in the tar archive extraction functionality. When extracting a tar archive in copy-in mode using the --no-absolute-filenames option, the extracted file name is...

PT-2026-69894

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.0 through 2.43 Description Calling the wordexp function with the WRDE APPEND flag can cause the interface to return invalid memory within the we wordv member. This condition may lead to a process abort during subsequen...

Linux Distros Unpatched Vulnerability : CVE-2026-66486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio -it, member...

PT-2026-69442

Name of the Vulnerable Software and Affected Versions GNU cpio affected versions not specified Description Improper encoding or escaping of output occurs in the archive member listing functionality. When listing archive members using the cpio -it command, member names are printed directly to the...

Linux Distros Unpatched Vulnerability : CVE-2026-66484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the...

Exploit for Argument Injection in Gnu Inetutils

CVE-2026-24061 — GNU Inetutils telnetd Auth Bypass → Root Shel...

CVE-2026-42170

A heap-based buffer overflow vulnerability exists in the GIMP DDS DirectDraw Surface file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel bpp value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the...

EulerOS 2.0 SP11 : glibc (EulerOS-SA-2026-3066)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width...

SUSE CVE-2026-18220

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...