CVE-2024-30203

In Emacs versions before 29.3 , the Gnus component treats inline MIME contents as trusted. This vulnerability occurs because the MIME protocol implementation includes functions from an unverified and uncontrolled area . Exploitation of this flaw could allow a perpetrator to induce a service failu...

CVE-2024-30204

The GNU Emacs text editor is vulnerable in versions before 29.3 because LaTeX preview is enabled by default for e-mail attachments in some Emacs MUAs. This configuration can lead to a denial of service (DoS) condition. Remediation involves upgrading to version 29.3 or higher. Patched versions are...

CVE-2024-53920

GNU Emacs versions prior to 30.1 are vulnerable to arbitrary code execution via unsafe Lisp macro expansion in elisp-mode.el . The flaw is triggered when a user invokes elisp-completion-at-point on untrusted Emacs Lisp source code or enables on-the-fly diagnosis , which causes the byte-compilatio...

CVE-2024-30205

The GNU Emacs text editor contains a vulnerability where Org mode treats the contents of remote files as trusted. This affects Org Mode versions prior to 9.6.23 and Emacs versions before 29.3 . The root cause is the loading of code without checking its integrity, which could allow an attacker to ...

CVE-2024-39331

GNU Emacs versions before 29.4 are vulnerable because the org-link-expand-abbrev function in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string . This issue specifically affects Org Mode before version 9.7.5 . The vulnerability could...

CVE-2024-30202

The GNU Emacs text editor is vulnerable to the execution of arbitrary Lisp code triggered when enabling Org mode . This issue affects Emacs versions prior to 29.3 and specifically impacts Org Mode versions before 9.6.23 . Impact details are not explicitly provided, but the vulnerability allows fo...

CVE-2007-6109

CVE-2007-6109 describes a stack-based buffer overflow in Emacs triggered by a large precision value in an integer format specifier to the format function, leading to denial of service (crash) and potentially other impacts. Concrete references in connected docs indicate the vulnerability affects E...