GCVE-110-MAGEIA-2024-397

Advisory Published

Vulnetix · Advisory published December 24, 2024

In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code). (CVE-2024-53920)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	emacs	0 (affected), 29.4-1.2.mga9 (unaffected)	—

References

Updated emacs packages fix security vulnerability

advisory

Updated emacs packages fix security vulnerability

issue

Updated emacs packages fix security vulnerability

issue

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON