Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-77219— GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader

Quick assessment

Affected
GNU Emacs
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 GNU Emacs 31.0.91 之前的版本中，PBM/PPM/PGM 图像加载器存在整数溢出漏洞。攻击者可以通过提供具有超大尺寸和较高最大颜色索引值的构造图像，泄露堆内存内容。图像加载器使用有符号整数运算将图像尺寸与通道数相乘；当数值足够大时，结果会回绕为负数，从而绕过边界检查，导致像素读取器访问已分配缓冲区之后的堆内存。被越界读取的数据被解释为像素颜色值并显示在屏幕上。

CVSS 7.1 · High EPSS 0.13% · P3

Affected Version Matrix 1

VendorProduct Version RangeStatus
GNU Emacs < 31.0.91 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-77219

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
Source: CVE Program / CVE List V5
Vulnerability Description
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed integer arithmetic; for sufficiently large values, the result wraps to a negative number, bypassing the bounds check and causing the pixel reader to access heap memory past the end of the allocated buffer. The over-read contents are interpreted as pixel color values and rendered on screen.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
GNU Emacs 0 ~ 31.0.91 -

II. Public POCs for CVE-2026-77219

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 9981 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-77219

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-77219 (1)

Vendor Advisories for CVE-2026-77219 (1)

Mailing List Discussions for CVE-2026-77219 (1)

Vendor Pages for CVE-2026-77219 (1)

IV. Related Vulnerabilities

Same product: Emacs
Same vendor: GNU
Same weakness: CWE-190

V. Comments for CVE-2026-77219

No comments yet

Leave a comment