Read the docs
TI-2026-31928 Aliases CVE-2026-43864GHSA-gwv2-2c9f-hmfv

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

Priority LOW 11CWE-476Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Low
Fix status
Partial Red Hat: 5 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00096 0th percentileScored 2026-11-07
Fix Partial mutt (mutt): 2.3.2Red Hat: 5 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
muttmuttbefore 2.3.22.3.2Patch availableCNA
  • mutt Vendormutt Affected before 2.3.2 Fixed in 2.3.2 Patch available CNA

Remediation

  • Fix · CNA mutt (mutt) Fixed in 2.3.2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    mutt 2.3.2

    6 records Highest priority Priority LOW 6 LOW

    Other records, highest priority first

    • TI-2026-31927 mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.Priority LOW 17
    • TI-2026-31926 In mutt before 2.3.2, the imap_auth_gss security level is mishandled.Priority LOW 17
    • TI-2026-31925 mutt before 2.3.2 does not check for '\0' in url_pct_decode.Priority LOW 17
    Show all 6 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 10AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 6AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 7AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux 9AffectedNo fix yet: Fix deferred

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-43864
  2. 2026-10-03 Alias added: GHSA-gwv2-2c9f-hmfv

References

Other 1

  • TI-2018-10297 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. CVSS 3.1CRITICAL 9.8
  • TI-2018-10300 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. CVSS 3.1CRITICAL 9.8
  • TI-2018-10293 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. CVSS 3.1CRITICAL 9.8
  • TI-2018-10302 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. CVSS 3.1CRITICAL 9.8
  • TI-2018-10301 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. CVSS 3.1CRITICAL 9.8
  • TI-2018-10295 An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. CVSS 3.1CRITICAL 9.8
See all 52 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences