CVE-2014-4150: The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitra...

Security readout for executives and security teams

CVE-2014-4150 is a local file-safety flaw in Scheme 48's Emacs integration. A local user may be able to make the tool write through a predictable temporary-file path, potentially altering files the invoking user can write. The sources do not show remote exploitation, active exploitation, CVSS scoring, or a complete affected-version list. Exposure is most likely on systems where Scheme 48's cmuscheme48.el Emacs integration is installed and used, especially shared Unix-like hosts. The CVE bundle lists affected vendor/product/versions as n/a, so precise inventory matching requires checking local packages against vendor or distribution records. Treat this as a moderate-priority hygiene fix for shared developer or academic systems. It is not evidenced as remotely exploitable or actively exploited in the provided sources, but local arbitrary file write can matter where multiple users share hosts or privileged workflows use the affected tooling. Mitigation focus: Check Scheme 48 or distribution advisories for a patched package or backport.; Review the upstream Scheme 48 revision referenced in the CVE bundle.; Update vulnerable Scheme 48 packages through trusted vendor or distribution channels..

Prepared

Jun 7, 2026, 13:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.