Threats Tagged 'ghsa-jx5g-mm7r-35gq'
View all threats tagged with 'ghsa-jx5g-mm7r-35gq'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-jx5g-mm7r-35gq'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-71394: CWE-1284 Improper Validation of Specified Quantity in Input in GNU EmacsCVE-2026-71394 0 GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a struct with uninitialized heap memory in the table directory entries. An attacker can deliver a malicious font file via email, EWW (Emacs Web Wowser), or documents with custom faces, causing Emacs to load it. This leads to the use of uninitialized heap data in subsequent table lookups, potentially resulting in information disclosure, crashes, or arbitrary memory access on 32-bit targets. This issue is fixed after commit 7621ee1d01229d50e5c0cddea6bf0b01095a62cf Join the discussion | CVE Database V5 | 08/10/2026, 10:23:11 UTC Added: 08/10/2026, 10:41:48 UTC |
Showing 1 to 1 of 1 result