CVE-2026-71391

A flaw was found in GNU Emacs for Android. An off-by-one error in the gvar table parser allows a remote attacker to deliver a specially crafted TrueType variable font. This can bypass a boundary check, leading to a heap-based out-of-bounds read. Successful exploitation exposes heap memory content...