mutt-2.4.2-2.1 on GA media
Description
A heap out-of-bounds write vulnerability exists in mutt version 2.4.2-2.1 on GA media. The flaw occurs in the convert_file_from_to() function when processing a crafted Content-Type header, allowing an attacker to perform an out-of-bounds write if the email is used as a template. This vulnerability has been assigned CVE-2026-107570 and is rated with medium severity.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-107570 describes a heap out-of-bounds write vulnerability in the convert_file_from_to() function of mutt version 2.4.2-2.1 on GA media. The vulnerability is triggered via a specially crafted Content-Type header in an email, which leads to an out-of-bounds write when the email is used as a template. This could potentially lead to memory corruption issues. No CVSS score or detailed exploit information is provided, and no patch or remediation details are available in the provided data.
Potential Impact
The vulnerability allows an attacker to cause a heap out-of-bounds write, which may lead to memory corruption. The exact impact beyond this is not detailed in the source data. There are no known exploits in the wild at the time of publication.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:12094-1
- Cve Count
- 1
Threat ID: 6acaadb62cdf04f65651521f
Added to database: 10/10/2026, 21:27:18 UTC
Last enriched: 10/10/2026, 21:44:59 UTC
Last updated: 10/10/2026, 22:08:10 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.