PT-2024-23253 · Emacs+7 · Emacs+7

Published 2024-03-25 · Updated 2025-08-13 · CVE-2024-30204

Positive Technologies (AI Summary)

CVSS v3.1

2.8

Low

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Emacs versions prior to 29.3

Description The issue is related to LaTeX preview being enabled by default for e-mail attachments in Emacs. This could potentially allow attackers to execute remote code. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Emacs versions prior to 29.3, upgrade to a patched version immediately to resolve the issue. As a temporary workaround, consider disabling LaTeX preview for e-mail attachments until a patch is available.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

AZL-37106

BDU:2025-16176

CVE-2024-30204

DLA-3801-1

DLA-3802-1

INFSA-2024_9302

MGASA-2024-0104

OESA-2024-1390

OPENSUSE-SU-2024_1294-1

RHSA-2024:9302

RHSA-2024_9302

RLSA-2024:9302

SUSE-SU-2024:1294-1

SUSE-SU-2024:1317-1

SUSE-SU-2024:2297-1

USN-7027-1

Affected Products

Astra Linux

Debian

Emacs

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 75

• https://ubuntu.com/security/CVE-2022-48339 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7027-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1294-1 · Vendor Advisory
• https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c · Patch
• https://osv.dev/vulnerability/DLA-3801-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39331 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-9302.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30203 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:9302 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30204 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30205 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-37106 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2297-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16176 · Security Note