# CVE-2026-77219: GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader CVE-2026-77219 is fixed in 13 products on 1 platform, first by OPENSUSE-SU-2026:21711-1, released August 31, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-77219 - Priority: High - CVSS: 7.8 (Moderate) - EPSS: 0.0013 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Aug 21, 2026 - Weakness: Integer Overflow or Wraparound - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77219 ## Description GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image (CVE-2026-77219) * emacs: local shell command injection through the user field in emacs tramp (CVE-2026-79992) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | emacs RHEL 10 | 29.4-14.el10_2.3 | [RHSA-2026:84591](https://patchblox.com/security/data/fix/linux/rhsa-2026-84591.md) | Sep 14, 2026 | | Linux | emacs RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs opensuse-leap 16.0 | 30.2-160000.3.1 | [OPENSUSE-SU-2026:21711-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21711-1.md) | Aug 31, 2026 | | Linux | emacs rocky 10 | 1:29.4-14.el10_2.3 | [RLSA-2026:84591](https://patchblox.com/security/data/fix/linux/rlsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs rocky 8 | 1:26.1-15.el8_10.2 | [RLSA-2026:80506](https://patchblox.com/security/data/fix/linux/rlsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs rocky 9 | 1:27.2-18.el9_8.2 | [RLSA-2026:80507](https://patchblox.com/security/data/fix/linux/rlsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs sles 15.6 | 27.2-150400.3.31.2 | [SUSE-SU-2026:4083-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4083-1.md) | Sep 8, 2026 | | Linux | emacs sles 15.7 | 27.2-150400.3.31.2 | [SUSE-SU-2026:4083-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4083-1.md) | Sep 8, 2026 | | Linux | emacs sles 16.0 | 30.2-160000.3.1 | [SUSE-SU-2026:23589-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23589-1.md) | Aug 31, 2026 | | Linux | emacs-common RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-common RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-common almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-common almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-common almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-common amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-common ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-common ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-common ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-common-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-debugsource amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-devel amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-filesystem RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-filesystem RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-filesystem almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-filesystem almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-filesystem almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-filesystem amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-filesystem ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-filesystem ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-filesystem ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-lucid RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-lucid RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-lucid almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-lucid almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-lucid almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-lucid amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-lucid ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-lucid ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-lucid ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-lucid-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-nox RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-nox RHEL 9 | 1:27.2-18.el9_8.2 | [RHSA-2026:80507](https://patchblox.com/security/data/fix/linux/rhsa-2026-80507.md) | Oct 12, 2026 | | Linux | emacs-nox almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-nox almalinux 9 | 1:27.2-18.el9_8.2 | [ALSA-2026:80507](https://patchblox.com/security/data/fix/linux/alsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-nox amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-nox ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-nox ol 9 | 1:27.2-18.el9_8.2 | [ELSA-2026-80507](https://patchblox.com/security/data/fix/linux/elsa-2026-80507.md) | Nov 7, 2026 | | Linux | emacs-nox-debuginfo amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-nw almalinux 10 | 1:29.4-14.el10_2.3 | [ALSA-2026:84591](https://patchblox.com/security/data/fix/linux/alsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-nw ol 10 | 1:29.4-14.el10_2.3 | [ELSA-2026-84591](https://patchblox.com/security/data/fix/linux/elsa-2026-84591.md) | Nov 7, 2026 | | Linux | emacs-terminal RHEL 8 | 1:26.1-15.el8_10.2 | [RHSA-2026:80506](https://patchblox.com/security/data/fix/linux/rhsa-2026-80506.md) | Oct 12, 2026 | | Linux | emacs-terminal almalinux 8 | 1:26.1-15.el8_10.2 | [ALSA-2026:80506](https://patchblox.com/security/data/fix/linux/alsa-2026-80506.md) | Nov 7, 2026 | | Linux | emacs-terminal amzn 2023 | 1:28.2-3.amzn2023.0.11 | [ALAS2023-2026-2147](https://patchblox.com/security/data/fix/linux/alas2023-2026-2147.md) | Sep 14, 2026 | | Linux | emacs-terminal ol 8 | 1:26.1-15.el8_10.2 | [ELSA-2026-80506](https://patchblox.com/security/data/fix/linux/elsa-2026-80506.md) | Nov 7, 2026 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.