Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.5
Mutt on openEuler can let attackers corrupt memory
published 6 days ago
Summary
The text‑based email program Mutt on the openEuler platform can be tricked by a specially crafted email header to write data outside its intended area in memory. This could let an attacker take control of the program or cause it to crash. Update Mutt to the latest version provided by openEuler as soon as possible to apply the fix.
What to do
- Update openeuler mutt to version 2.2.12-5.oe2403sp3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openEuler:24.03-LTS-SP3 | openeuler | mutt |
< 2.2.12-5.oe2403sp3 Fix: upgrade to 2.2.12-5.oe2403sp3
|
Original advisory text
mutt security update
Mutt is a small but very powerful text-based mail client for Unix operating systems.
Security Fix(es):
heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.(CVE-2026-107570)
Security Fix(es):
heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.(CVE-2026-107570)
References
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-107570 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published29 Oct 2026
Updated29 Oct 2026
First seen29 Oct 2026
Sources
OESA-2026-4646 · OSV
Track software like this
Free during beta