CVE-2026-77219
High · 7.1CVSS
7.1
EPSS
0.2%
Published
Aug 21, 2026
CISA due date
—
The record
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-read contents are interpreted as pixel color values and rendered on screen.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-44235 rabbitmq-c is a C-language AMQP client library for RabbitMQ. CWE-125
- CVE-2026-18090 A flaw was found in gdk-pixbuf. CWE-125
- CVE-2026-0799 In BPF instructions that load/store a value from/to a scratch memory register the… CWE-125
- CVE-2026-31912 libpcap BPF interpreter detects neither reaching the end of the filter program buffer due… CWE-125
- CVE-2026-59981 OpenEXR is the reference implementation and specification for the EXR image file format… CWE-125
- CVE-2026-61555 OpenEXR is the reference implementation and specification for the EXR image format… CWE-125
- CVE-2026-59985 OpenEXR is the reference implementation and specification for the EXR image format… CWE-125
- CVE-2026-59983 OpenEXR is the reference implementation and specification for the EXR image format… CWE-125