MIME::Field::ParamVal versions before 5.521 for Perl do not properly flag ambiguous multipart boundaries when written as RFC 2231 continuations. This flaw allows a remote sender to craft a MIME message that causes MIME::Parser to split the message on a different boundary than other mail readers, potentially hiding attachments from filters relying on ambiguous_content() checks while the recipient's mail client displays them.