CVE-2025-1244

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1244
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1244.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-1244
Downstream
AZL (2)
CLSA (2)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (1)
RHSA (10)
RLSA (2)
SUSE (3)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (3)
Published
2025-02-12T14:27:45Z
Modified
2026-10-24T02:35:44Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme
Details

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.

Database specific 
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1244.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "1:24.3-23.el7_9.2"
                        },
                        {
                            "fixed": "1:26.1-13.el8_10"
                        },
                        {
                            "fixed": "1:26.1-13.el8_10"
                        },
                        {
                            "fixed": "1:26.1-5.el8_2.3"
                        },
                        {
                            "fixed": "1:26.1-5.el8_4.3"
                        },
                        {
                            "fixed": "1:26.1-5.el8_4.3"
                        },
                        {
                            "fixed": "1:26.1-5.el8_4.3"
                        },
                        {
                            "fixed": "1:26.1-7.el8_6.6"
                        },
                        {
                            "fixed": "1:26.1-7.el8_6.6"
                        },
                        {
                            "fixed": "1:26.1-7.el8_6.6"
                        },
                        {
                            "fixed": "1:26.1-10.el8_8.7"
                        },
                        {
                            "fixed": "1:27.2-11.el9_5.1"
                        },
                        {
                            "fixed": "1:27.2-6.el9_0.2"
                        },
                        {
                            "fixed": "1:27.2-8.el9_2.2"
                        },
                        {
                            "fixed": "1:27.2-10.el9_4.1"
                        },
                        {
                            "fixed": "1.3.1-1741784043"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "InverseAffectedRanges"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "29.4.0"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                }
            ]
        }
    ]
}
References

Affected packages

Git / cgit.git.savannah.gnu.org/cgit/emacs.git

Affected ranges

Type
GIT
Repo
https://cgit.git.savannah.gnu.org/cgit/emacs.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
820f0793f0b46448928905552726c1f1b999062f
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "820f0793f0b46448928905552726c1f1b999062f"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1244.json"