A vulnerability exists in mutt versions prior to 2.3.2 where the function url_pct_decode does not properly check for the null character '\0'. This flaw may lead to limited impact on the integrity of the application but does not affect confidentiality or availability.