redhat/mutt vulnerabilities

Latest redhat/mutt CVEs

Newest publication first

1. CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

   Published 2026-10-08

   Low·CVSS 2.5 EPSS 0.15%

   heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

2. CVE-2026-43864 mutt: Mutt: Denial of Service via null pointer dereference in show_sig_summary

   Published 2026-05-04

   Low·CVSS 2.5 EPSS 0.10%

   mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

3. CVE-2026-43863 mutt: Mutt: Remote Denial of Service via crafted input

   Published 2026-05-04

   Low·CVSS 3.7 EPSS 0.20%

   mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.

4. CVE-2026-43862 mutt: Mutt: Security bypass due to mishandled IMAP authentication

   Published 2026-05-04

   Low·CVSS 3.7 EPSS 0.16%

   In mutt before 2.3.2, the imap_auth_gss security level is mishandled.

5. CVE-2026-43861 mutt: Mutt: URL processing vulnerability due to improper null character handling

   Published 2026-05-04

   Low·CVSS 3.7 EPSS 0.16%

   mutt before 2.3.2 does not check for '\0' in url_pct_decode.

6. CVE-2026-43860 mutt: mutt: Authentication bypass due to IMAP CRAM-MD5 hash truncation

   Published 2026-05-04

   Low·CVSS 3.7 EPSS 0.16%

   mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.

7. CVE-2026-43859 mutt: Mutt: Low integrity impact in IMAP authentication due to cryptographic digest mishandling

   Published 2026-05-04

   Low·CVSS 3.7 EPSS 0.16%

   mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.