A vulnerability in mutt before version 2.3.2 causes the hash_passwd to sometimes be truncated by one byte during IMAP auth_cram MD5 digest processing. This issue can lead to integrity problems in authentication. The CVSS score is 3.7, indicating a medium severity level.