CVE-2026-71392

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-71392
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71392.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-71392
Downstream
Published
2026-08-10T10:22:26Z
Modified
2026-11-12T19:20:23Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:L/SA:N CVSS Calculator
Summary
Integer Overflow in GNU Emacs for Android
Details

GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. When processing a crafted TrueType font file, an unguarded addition in the xmalloc allocation call wraps around on 32-bit builds, causing a heap buffer overflow write. An attacker can deliver a malicious font file via email, EWW (Emacs Web Wowser), or documents with custom faces, causing Emacs to load it. This results in heap memory corruption that can lead to code execution.

This issue was fixed in commit c4e20777c26548722a37b03db93243e83a0d6188

Database specific 
{
    "cna_assigner": "CERT-PL",
    "cwe_ids": [
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71392.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "commit c4e20777c26548722a37b03db93243e83a0d6188"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "ChangesAt"
                }
            ]
        }
    ]
}
References

Affected packages

Git / cgit.git.savannah.gnu.org/cgit/emacs.git

Affected ranges

Type
GIT
Repo
https://cgit.git.savannah.gnu.org/cgit/emacs.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c4e20777c26548722a37b03db93243e83a0d6188
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "c4e20777c26548722a37b03db93243e83a0d6188"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}
Type
GIT
Repo
https://https.git.savannah.gnu.org/git/emacs.git/
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c4e20777c26548722a37b03db93243e83a0d6188
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "c4e20777c26548722a37b03db93243e83a0d6188"
                }
            ],
            "source": "DESCRIPTION"
        },
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "c4e20777c26548722a37b03db93243e83a0d6188"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Affected versions

emacs-19.*
emacs-19.34
emacs-20.*
emacs-20.1
emacs-20.2
emacs-20.3
emacs-20.4
emacs-pretest-21.*
emacs-pretest-21.0.100
emacs-pretest-21.0.101
emacs-pretest-21.0.102
emacs-pretest-21.0.103
emacs-pretest-21.0.104
emacs-pretest-21.0.105
emacs-pretest-21.0.106
emacs-pretest-21.0.90
emacs-pretest-21.0.91
emacs-pretest-21.0.92
emacs-pretest-21.0.93
emacs-pretest-21.0.95
emacs-pretest-21.0.96
emacs-pretest-21.0.97
emacs-pretest-21.0.98
emacs-pretest-21.0.99
emacs-pretest-22.*
emacs-pretest-22.0.90
emacs-pretest-22.0.91
emacs-pretest-22.0.92
emacs-pretest-22.0.93
emacs-pretest-22.0.94
emacs-pretest-22.0.95
emacs-pretest-22.0.96
emacs-pretest-22.0.97
emacs-pretest-22.0.98
emacs-pretest-23.*
emacs-pretest-23.0.90
emacs-pretest-23.0.91
emacs-pretest-23.0.92
emacs-pretest-23.0.93
emacs-pretest-23.0.94
emacs-pretest-23.0.95
emacs-pretest-23.1.90
emacs-pretest-23.1.91
emacs-pretest-23.1.92
mh-e-8.*
mh-e-8.0
mh-e-8.0.1
mh-e-8.0.2
mh-e-8.0.3
mh-e-8.1
mh-e-8.2
mh-e-doc-8.*
mh-e-doc-8.0
mh-e-doc-8.0.1
mh-e-doc-8.0.3
mh-e-doc-8.1
mh-e-doc-8.2
Other
ttn-vms-21-2-B4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71392.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "106185039406729743443400845739725223492",
            "length": 500
        },
        "id": "CVE-2026-71392-0ae207de",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_infer_deltas_1"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "190143949853402300127877874707129425700",
            "length": 623
        },
        "id": "CVE-2026-71392-114060ba",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_loca_table_long"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "117311514644262756626507345090750674239",
            "length": 623
        },
        "id": "CVE-2026-71392-12b112a0",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_prep_table"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "238352831275347348601990910102811241962",
            "length": 1469
        },
        "id": "CVE-2026-71392-19697422",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_build_outline_edges"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "202877835681834663070284220363559811382",
            "length": 623
        },
        "id": "CVE-2026-71392-1eef4f7a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_loca_table_short"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "159140735603380740174789569930932358862",
            "length": 3492
        },
        "id": "CVE-2026-71392-314f1974",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_simple_glyph"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "272653193127720791724562988632315838936",
            "length": 1706
        },
        "id": "CVE-2026-71392-38637e36",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_glyph"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "104545735670808477420594107755625382393",
            "length": 336
        },
        "id": "CVE-2026-71392-4560f9ef",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_raster_glyph_outline"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "161221756900428577015897443398186644868",
            "length": 6087
        },
        "id": "CVE-2026-71392-4e2a55c1",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_vary_simple_glyph"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "5622942892551491092323025831293848588",
            "length": 779
        },
        "id": "CVE-2026-71392-512e66a8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_packed_deltas"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "121803943588689967307892082239291818853",
                "92959298894303817598782309827149156078",
                "314458751656970260776308469818131483825",
                "145196853225379839145652129348322496413",
                "36816595436730954202185870392262643753",
                "281105082108270956557290164075488436093",
                "24732310532383063866856552389605226167",
                "76187459022080904726309117588466514453",
                "263857298423743090356021921783411404241",
                "13773019673953294041910362692024725280",
                "298782124062552619453319051448156942113",
                "86456724764487170030329750523611286912",
                "182020686305441359248669331256277511326",
                "48505589412484408097455443881401984177",
                "281105082108270956557290164075488436093",
                "126942828775722502958062288097541634419",
                "254679412060743042950515084827649554797",
                "270493577769060172234348489700338167302",
                "114723865964636115659401522358694366759",
                "187886821858035193731797859269359402167",
                "52892943574300116929292039712188474601",
                "203777647547679663780096335316410123704",
                "334920463752650412989506112947996957390",
                "5761975754565746805194200911423136950",
                "21370208939075830220962012027612847021",
                "99330669300446024517109549438066678275",
                "294607966586760614825415354684125452075",
                "62316173077168208169799022674120247310",
                "293781261473333159940452525095316715518",
                "19225185812285764720653224112778659679",
                "150764057227982262260214741558082536223",
                "111126050084337987603889274872409150489",
                "270819446461425752004684858259832706733",
                "43300592185527658827085073965579649079",
                "13007325034114352205316724804661513698",
                "207361353504178896097414155113765633061",
                "194867940763972572333543759608217605767",
                "43300592185527658827085073965579649079",
                "26182188706303847442624683493933697769",
                "42666585451826269187751114902516549589",
                "236414641339020381891099775373965749277",
                "141864800364963174008749442769884207931",
                "43867426116958663476557812673175509684",
                "138778017167530041835126819492981134481",
                "204005867325313813475441260583692424822",
                "147733302627064686616231230499350893921",
                "246326968288008264890109406151072750855",
                "127514679980526677465434548843634590093",
                "320870102376571356836417244046422732376",
                "279407590329067570660784675676247694130",
                "224370525933403574104220136025649628180",
                "263623257101686976025615659690472975569",
                "231764713192462299753917740468356312993",
                "58494753883056476750538621736938889307",
                "87553690493303705812891857198068578024",
                "7817033461751462745902078403306208522",
                "51278370803532533104103327226120494705",
                "198325821837907210420916616440557373249",
                "76166184983375655475996665987263527531",
                "257256293611175085153866084007076216842",
                "218544102973235181708333717723821866352",
                "19435383717732662736257929252331915313",
                "136863067232464990502834276802440122003",
                "194148447906588582804222794997501850158",
                "47171627186313641133381349166020613113",
                "194000719760751194193852558163664486727",
                "161693437122709104890132522738736342527",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "318710669856762425510145658558546436495",
                "111402012632302106042290341170275791335",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "294086307853788985120568463558860850447",
                "240231852716454820926507697438275457427",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "174037472055469105597047325324792247788",
                "261378403020918378837823013172385049287",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "63327175711012571903747323506779023086",
                "96300538891492842635292280028580446819",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "113840978419884296014912222213057075422",
                "26865008405502704953562493246923411103",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "63327175711012571903747323506779023086",
                "96300538891492842635292280028580446819",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "113840978419884296014912222213057075422",
                "26865008405502704953562493246923411103",
                "199906310753459665512360946023461983111",
                "166754145135536883632463828408333524095",
                "147612390610678751760378751355625991359",
                "304815428086196896704681351181571392390",
                "282546057918806592866545211257389012660",
                "249754021411056535436170723316423734174",
                "132868997334250035116144187929319317684",
                "221701977188105977470351411291603550071",
                "27553064386445957360655571696153631086",
                "297917836520334937006475193208500705776",
                "198599033971349099222537962153239354803",
                "267615263182329102500667029633837413697",
                "308984288424107302339300539491258363475",
                "111086228229573039221366444024577532410",
                "156177031476383572579142184838906207961",
                "111383363010944097335769099784137579802",
                "120379990415291146513221799624706832627",
                "242316484601701609781796495024350603065",
                "186098759428187456733205682845052567549",
                "42703868108591730730443037594951355406",
                "151319231404245685143175317377974064352",
                "151202946220950180512388242778069104516",
                "218779076802852908463515965848510485702",
                "204450604339605826103114028711483448369",
                "103241428284400884705652024175400880421",
                "284702313080582228948116111956285506904",
                "57406254548785166345909539086043652182",
                "320855690066739519189425257512138386806",
                "210658528736396422682797423891091606119",
                "42310362724825577143605027041019170974",
                "219465496124921083813090632890171462917",
                "198212987730905192471528495492133156757",
                "39868519568075314717482333574877498686",
                "336008281929268680123725722242337213473",
                "225093365623519322770412107533848084739",
                "55001816833666956353193717851079379912",
                "63703317527141502352260969020214042725",
                "16070840518913319194218852136222438685",
                "90256109868979596127182206001922774583",
                "253899001749083449148344807581059157819",
                "236248153902480075197624477784189265730",
                "113874806566577437757856203624682979672",
                "92522384147593005398467880219645372313",
                "269791272199604012310997940778130575459",
                "42310362724825577143605027041019170974",
                "219465496124921083813090632890171462917",
                "198212987730905192471528495492133156757",
                "156244501785098414196819974994638300084",
                "9589135522117394533460935393975837981",
                "106429543721812008721840458196062641665",
                "320637197988788355962097499575523158580",
                "225093365623519322770412107533848084739",
                "55001816833666956353193717851079379912",
                "63703317527141502352260969020214042725",
                "16070840518913319194218852136222438685",
                "89169961108230851866949191413209340049",
                "201439845877704284463182123819047069621",
                "328614718784733418274112924463284767779",
                "323123571818133683842103007708561755485",
                "138581698600531009401735829299516062375",
                "202190454432490670225504185186910715641",
                "99548014282985231592662370006229765281",
                "283231015219607110588282393589270202649",
                "111072759239176725140865959222503847486",
                "221530871467504380803434241054706385686",
                "334164708678961416627589646040382188903",
                "137450149393858866823049737018016112383",
                "288815606200118124513240665017203295071",
                "309320044419692792605639726804200644059",
                "333865022452702007860012758064052370383",
                "326655059302837412904678099353343094749",
                "237070792435209972965691149097879235871",
                "304766470979755249986637021175589842790",
                "338804777426783438521659637835947119881",
                "146211759275529457270954852166938762820",
                "332509938732181413966421315720247933676",
                "83793118022129040487355159431849468349",
                "211847816037522961337333998226848549356",
                "267300833520155699716421149723284888078",
                "27258832531986566194066664329785937902",
                "143001071429850896716105168838959518743",
                "40856116763514316986213351276649319880",
                "193982129955443780393688513763021118905",
                "56587343347780905429604044891431578087",
                "335520962444217449561215717091194162421",
                "214866555980661922794529631018617767345",
                "279827888747629107253124527080659310984",
                "174778089675641234032512975736310748543",
                "230357300446965235947025988770169817838",
                "17233323859250877151938555726180311866",
                "50114510725103240232665143329892823935",
                "63437120846457107444417407475236084320",
                "222094809760186080996662352835833414440",
                "195840299586774490339702178913418073780",
                "319496441345787163527935683537488842466",
                "45138071475295310527540409055719578015",
                "235319558333443245596357247984894672166",
                "176094685189543774828171341717160704341",
                "79901077872894152290150235971632185319",
                "316592959328951482700088809748063513327",
                "101102627107410998472310586756120424168",
                "258845368255988117406180823722705321152",
                "239760319886908913540665559781122120665",
                "132378020090705796233771487617149177346",
                "209712985309875459081757139621624990086",
                "185314432473984447994657024191199582754",
                "289144633560206285910001784731653247726",
                "338032713252384180693608867469562403373",
                "180630073895799521501963875232396429474",
                "312303172368452965598202181291250959045",
                "47314617029791268060975982602951426040",
                "106017700999608217600780409560210530279",
                "333371980662993743363746430596305862198",
                "67831989671425508939033093715578340801",
                "270812690207039489921719348449349031306",
                "301386530281177293603586444678081723814",
                "289127576107509345602124465080559485170",
                "194391614400337053394640304273389162392",
                "113239053581274257673986255615206521652",
                "221922860622742568894923352541994523779",
                "2868109661265321381862601245226125741",
                "51308202247968641062295568822232530991",
                "174087617219954280245628685783309699695",
                "26633579107030771983935707304102698800",
                "56879979025576167527679073096954687496",
                "126105802160575639995697200232055397036",
                "12492758866610846926628920008383924085",
                "188356360987716134165334000413472523310",
                "244418744228920812653545800880786081942",
                "204139423009143685955872600494440147311",
                "90112204346272073989808799122770817688",
                "32872743182384949469093410906846051337",
                "147986360134897689607823993404905954644",
                "200855374420751663429231402205985913177",
                "227023044526493209173782296556298835016",
                "262281186049782006833057574037000668329",
                "287813100085358302896439113791739642566",
                "87795190721272120756034341524783070197",
                "166181998766813135331854024174310584398",
                "183609959002426390569117641538399355992",
                "70355108870976600217944485212618236666",
                "232355104177650466305426490113031727540",
                "72188806528770981975507485920842551305",
                "161613111627689808386043394048496627021",
                "294301839765321356632875367510378079436",
                "188035789555349985771780934810391114951",
                "309210297454390321152229124532130382262",
                "89097194729037291035739063745468741920",
                "189570066086562449982026030912424204903",
                "73157830472841130918397134449690936600",
                "330450112208310159912610053364859319202",
                "280758131279606340573679584954595452271",
                "216544825986195266083171271744751641075",
                "19347407925659831713039250620190627182",
                "263358290981643582087819253387269954497",
                "152990430107276786959352608415804047742",
                "200249020840937858054063514141098131204",
                "200313728094247087538445035862812206025",
                "316437714089983686576613721535728537221",
                "87279273561006768254824615834763097370",
                "92672860126584267985360162810185381242",
                "297942611992869651209298961462702885941",
                "28434604692883111767038572818260190923",
                "261764148247891210419085339889972464730",
                "72764414143881337358555837288826984852",
                "331293198972697536786400913268155683782",
                "127763659569701199421057460281898605565",
                "278842426237627510299330403928560611556",
                "2175052304236900967079708216670127396",
                "146665161626197948935795115395200447238",
                "112930513827884674118838855510255881764",
                "289534517223072080162066593476751947399",
                "209063528080524145716632337905644939366",
                "234745867327846813495776321908157904901",
                "256630161298155792403552971224121862845",
                "72764414143881337358555837288826984852",
                "331293198972697536786400913268155683782",
                "127763659569701199421057460281898605565",
                "278842426237627510299330403928560611556",
                "2175052304236900967079708216670127396",
                "146665161626197948935795115395200447238",
                "112930513827884674118838855510255881764",
                "71953855467209564674566584649606204019",
                "200855374420751663429231402205985913177",
                "227023044526493209173782296556298835016",
                "262281186049782006833057574037000668329",
                "287813100085358302896439113791739642566",
                "87795190721272120756034341524783070197",
                "166181998766813135331854024174310584398",
                "113558924852546348590644412291442480969",
                "230307631493560586913507697812021330379",
                "141038561417431118748866139728964473584",
                "138980776282337200124916129275605658749",
                "266520880629641195232247255280324225269",
                "214688570852064956735005064983170173973",
                "308014440433145408426235259533419686611",
                "33960029499471315497949294386571326557",
                "154714119374943202031737865679660292556",
                "266520880629641195232247255280324225269",
                "7658479891511698577865182012373422308"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-71392-582e8536",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "333389652023148580822348807136919215985",
            "length": 2411
        },
        "id": "CVE-2026-71392-6189a87e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_name_table"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "196459174826049919197767299050464879048",
            "length": 623
        },
        "id": "CVE-2026-71392-7e63f213",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_fpgm_table"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "150017546114118498925564108141053264775",
            "length": 1063
        },
        "id": "CVE-2026-71392-8470d1da",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_build_append"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "148071498005827022943905424159904627705",
            "length": 2826
        },
        "id": "CVE-2026-71392-8490792e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_gvar_table"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "97090517522334995970855631583145622143",
            "length": 1403
        },
        "id": "CVE-2026-71392-8f4e22b3",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_build_outline_fedges"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "252889534950476433100047958704238644533",
            "length": 1870
        },
        "id": "CVE-2026-71392-974f29b0",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_meta_table"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "174022668424935363914447445258995375456",
            "length": 1259
        },
        "id": "CVE-2026-71392-a0edad11",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_ttc_header"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "27976534690312049984115636130373853121",
            "length": 1419
        },
        "id": "CVE-2026-71392-b7080fd1",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_cmap_format_12"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "51121112420548263999657270533465991524",
            "length": 3000
        },
        "id": "CVE-2026-71392-c3fd1780",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_create_uvs_context"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "82083699782963451174649699473170264614",
            "length": 5267
        },
        "id": "CVE-2026-71392-d373edf6",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_vary_compound_glyph"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "104376057755375634743956178984608622034",
            "length": 4521
        },
        "id": "CVE-2026-71392-e1c553c3",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_compound_glyph"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "243220751460782008841991503540149202681",
            "length": 343
        },
        "id": "CVE-2026-71392-e27908d5",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_raster_glyph_outline_exact"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "3693413364750351330138416981742326493",
            "length": 525
        },
        "id": "CVE-2026-71392-f4193e97",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_glyf_table"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "129299560392794660747825791192916253891",
            "length": 1151
        },
        "id": "CVE-2026-71392-fcc16362",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://https.git.savannah.gnu.org/git/emacs.git/@c4e20777c26548722a37b03db93243e83a0d6188",
        "target": {
            "file": "src/sfnt.c",
            "function": "sfnt_read_hmtx_table"
        }
    }
]
vanir_signatures_modified 
"2026-11-12T19:20:23Z"