MMutt

Products

Exploited and recent CVEs

• CVE-2026-107570 Low 2.5 Use of Out-of-range Pointer Offset in mutt 0.2%
• CVE-2026-43864 Low 2.5 mutt before 2.3.2 has a show_sig_summary NULL pointer dereference. <0.1%
• CVE-2026-43863 Low 3.7 mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. 0.2%
• CVE-2026-43862 Low 3.7 In mutt before 2.3.2, the imap_auth_gss security level is mishandled. 0.2%
• CVE-2026-43861 Low 3.7 mutt before 2.3.2 does not check for '\0' in url_pct_decode. 0.2%
• CVE-2026-43860 Low 3.7 mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest. 0.2%
• CVE-2026-43859 Low 3.7 mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. 0.2%
• CVE-2023-4874 Medium 4.3 Undefined Behavior for Input to API in Mutt 0.8%
• CVE-2023-4875 Low 2.2 Undefined Behavior for Input to API in Mutt 0.6%
• CVE-2022-1328 Medium 4.3 Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line 1.7%