CVE-2026-71391 | GNU Emacs up to 30.2 Gvar Table Parser src/sfnt.c sfnt_vary_simple_glyph/sfnt_vary_compound_glyph off-by-one (WID-SEC-2026-2721)

A vulnerability categorized as critical has been discovered in GNU Emacs up to 30.2. Affected by this issue is the function sfnt_vary_simple_glyph/sfnt_vary_compound_glyph of the file src/sfnt.c of the component Gvar Table Parser. Executing a manipulation can lead to off-by-one. This vulnerability appears as CVE-2026-71391. The attack may be...