CVE-2026-107570

Use of Out-of-range Pointer Offset in mutt

mutt mutt

CVSS

2.5Low

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)0.13%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version yet

Published8 Oct 2026Updated 9 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version.

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

Text from CVE List