TI-2026-31928 CVE-2026-43864 · GHSA-gwv2-2c9f-hmfv
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
Priority LOW 11
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
Vulnerabilities
6 records
TI-2026-31927 CVE-2026-43863 · GHSA-g7m5-w98f-vqg2
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
Priority LOW 17
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
TI-2026-31926 CVE-2026-43862 · GHSA-x2q8-3525-p6pr
In mutt before 2.3.2, the imap_auth_gss security level is mishandled.
Priority LOW 17
In mutt before 2.3.2, the imap_auth_gss security level is mishandled.
TI-2026-31925 CVE-2026-43861 · GHSA-9mq4-23j6-p23w
mutt before 2.3.2 does not check for '\0' in url_pct_decode.
Priority LOW 17
mutt before 2.3.2 does not check for '\0' in url_pct_decode.
TI-2026-31924 CVE-2026-43860 · GHSA-8499-whq2-xrrf
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
Priority LOW 17
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
TI-2026-31923 CVE-2026-43859 · GHSA-rhvq-8hmp-hm8h
mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.
Priority LOW 17
mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.