← All advisories

High severity7.8NVD Advisory· Published Mar 25, 2024· Updated Jun 17, 2026

CVE-2024-30202

CVE-2024-30202

Description

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

GNU/Emacsllm-fuzzy2 versions
<29.3+ 1 more
- (no CPE)range: <29.3
- cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*range: <29.3
GNU/Org Modellm-fuzzy2 versions
<9.6.23+ 1 more
- (no CPE)range: <9.6.23
- cpe:2.3:a:gnu:org_mode:*:*:*:*:*:gnu_emacs:*:*range: <9.6.23

Patches

Vulnerability mechanics

References

5

git.savannah.gnu.org/cgit/emacs.git/commit/nvdPatch
git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/nvdPatch
www.openwall.com/lists/oss-security/2024/03/25/2nvdMailing List
www.openwall.com/lists/oss-security/2024/04/08/6nvdMailing List
git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWSnvdRelease Notes

News mentions

0

No linked articles in our index yet.