CVE-2024-53920CWE-94code-injection

CVE-2024-53920

High · published November 27, 2024

CVSS v3.1
7.8
EPSS
1%
Percentile
48.0
In the wild
Unconfirmed
What it is

In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00600 · 48.0th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-11-27T20:15Z
Affected products (1)
ProductVersionsFixed in
gnu/emacs< 30.130.1
References (11)
https://eshelyaron.com/posts/2024-11-27-emacs-aritrary-code-execution-and-how-to-avoid-it.html · [email protected]https://git.savannah.gnu.org/cgit/emacs.git/tag/?h=emacs-30.0.92 · [email protected]https://git.savannah.gnu.org/cgit/emacs.git/tree/ChangeLog.4 · [email protected]https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-30.1 · [email protected]https://news.ycombinator.com/item?id=42256409 · [email protected]https://yhetil.org/emacs/CAFXAjY5f4YfHAtZur1RAqH34UbYU56_t6t2Er0YEh1Sb7-W=hg@mail.gmail.com/ · [email protected]http://www.openwall.com/lists/oss-security/2026/08/20/3 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2026/08/20/7 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2026/09/14/1 · af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2026/09/21/9 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/02/msg00033.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 27 NOV 00:00Z
    In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source code can…
    cvelistv5