SUSE CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

AZL-106736 CVE-2026-107570 affecting package mutt 2.2.12-1

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

DEBIAN-CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

UBUNTU-CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

EUVD-2026-94853

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

The mutt mail client is vulnerable to a heap out-of-bounds (OOB) write in the convert_file_from_to() function. This issue can be triggered by providing a crafted Content-Type header when an email is being used as a template. The vulnerability is characterized as a Use of Out-of-range Pointer Offs...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

PT-2026-107893

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.4.2-2.1 Description A heap out-of-bounds write occurs in the convert file from to function when an email is used as a template. An attacker can trigger this issue by providing a crafted Content-Type header...

CVE-2026-107570: Use of Out-of-range Pointer Offset

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

Linux Distros Unpatched Vulnerability : CVE-2026-107570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template. CVE-2026-107570 Note that...

GHSA-V76P-62QX-WWQ2 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

Summary When decoding a tiled TIFF with fax compression T4/T6/MH, DecodeTilesChunky allocates each tile buffer from TileWidth ceilTileWidthbpp/8TileLength bytes but constructs the fax decompressor with frame.Width: TiffDecompressorsFactory ignores the isTiled/tileWidth/tileHeight parameters...

GHSA-JJ3Q-CWQJ-842R ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

Summary When decoding a fax-compressed strip TIFF Compression=3 / Group 3 1D, or Compression=2 / Modified Huffman, the CCITT decompressors write decoded runs through BitWriterUtils.WriteBits/WriteBit/WriteZeroBit, which advance and write bits via Unsafe.Add with read-modify-write semantics —...

ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

Summary When decoding a fax-compressed strip TIFF Compression=3 / Group 3 1D, or Compression=2 / Modified Huffman, the CCITT decompressors write decoded runs through BitWriterUtils.WriteBits/WriteBit/WriteZeroBit, which advance and write bits via Unsafe.Add with read-modify-write semantics —...