CVE-2026-27852

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1

Description An attacker can send a crafted email with headers containing an excessive number of email addresses or MIME parameters. When the message is parsed via IMAP, it leads to excessive memory consumption, which can exhaust the process memory limit and terminate it, resulting in a denial of service for the affected user.

Recommendations Update to version 2.4.5-1.1.