CVE-2026-107570
mutt: mutt: Memory corruption via crafted Content-Type header in email template
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 8, 2026
Updated · October 9, 2026
Description
A flaw was found in mutt. When an email is processed as a template, an out-of-bounds write vulnerability in the convert_file_from_to() function can be triggered by a specially crafted Content-Type header. A remote attacker could entice a user to use a malicious email message as a template, potentially leading to memory corruption and application instability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.5CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CWE-787 · Out-of-bounds Write