A heap out-of-bounds write vulnerability exists in the mutt email client in the convert_file_from_to() function. This flaw can be triggered via a crafted Content-Type header when an email is used as a template. The issue affects versions prior to 2.2.12-5.oe2403sp1 and has a low severity rating.