PT-2026-107893 · Mutt · Mutt

CVE-2026-107570

Published

2026-10-08

Updated

2026-10-08

CVSS v3.1

2.5

Low

Vector

AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

heap OOB write in convert file from to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-107570

Mutt