USN-8835-1: Emacs vulnerability
Ubuntu warns Emacs can crash or leak data when opening a crafted SVG image.
Ubuntu Security Notice USN-8835-1 says Emacs improperly handles specially crafted SVG images, causing memory corruption. An attacker could crash Emacs for a denial of service or obtain sensitive information. The notice does not cite a CVE and does not report active exploitation.
- Crafted SVG images can trigger memory corruption in Emacs.
- Impact is a crash, denial of service, or possible data exposure.
- Ubuntu published the issue as routine notice USN-8835-1.
From the original article
It was discovered that Emacs improperly handled specially crafted SVG images, resulting in memory corruption. An attacker could possibly use this issue to cause Emacs to crash, resulting in a denial of service, or obtain sensitive information.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.