A heap out-of-bounds write vulnerability exists in the convert_file_from_to() function of the Mutt email client. This flaw can be triggered via a crafted Content-Type header when an email is used as a template. The issue affects versions prior to 2.2.12-5.oe2203sp4 and has a low severity rating.