Description

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

Related CPE's

Could not find any relations

References

https://gitlab.com/muttmua/mutt/-/work_items/533

Weaknesses

[email protected]

Secondary
CWE-823

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

2.5 · Low

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-08T12:17:14.717Z

20 hours ago

Last modified

2026-10-08T21:02:43.860Z

12 hours ago