Veille CVE

Recherche « mutt »

8 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 7 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « mutt » ✕
  1. CVE-2026-108094 7.8 Élevée

    Red Hat Enterprise Linux 10 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9

    A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed wl_resource, writes into freed memory, and frees a pointer derived from that memory. This can crash the GNOME session and may allow arbitrary code execution within the compositor process.

  2. CVE-2026-107570 2.5 Faible

    mutt

    heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

  3. CVE-2026-43864 2.5 Faible

    mutt

    mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

  4. CVE-2026-43863 3.7 Faible

    mutt

    mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.

  5. CVE-2026-43862 3.7 Faible

    mutt

    In mutt before 2.3.2, the imap_auth_gss security level is mishandled.

  6. CVE-2026-43861 3.7 Faible

    mutt

    mutt before 2.3.2 does not check for '\0' in url_pct_decode.

  7. CVE-2026-43860 3.7 Faible

    mutt

    mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.

  8. CVE-2026-43859 3.7 Faible

    mutt

    mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.