CVE-2026-71391 | GNU Emacs up to 30.2 Gvar Table Parser src/sfnt.c sfnt_vary_simple_glyph/sfnt_vary_compound_glyph off-by-one

A vulnerability categorized as critical has been discovered in GNU Emacs up to 30.2. Affected by this issue is the function sfnt_vary_simple_glyph/sfnt_vary_compound_glyph of the file src/sfnt.c of the component Gvar Table Parser. Executing a manipulation can lead to off-by-one.

This vulnerability appears as CVE-2026-71391. The attack may be performed from remote. There is no available exploit.

It is advisable to implement a patch to correct this issue.