CVE-2021-32055

Mutt 1.11.0 through 2.0.x before 2.0.7 and NeoMutt 2019-10-25 through 2021-05-04 has a $imapqresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imapqresync setting for QRESYNC is not enabled by default...

CVE-2021-32055

CVE-2021-32055 affects Mutt 1.11.0–2.0.x (before 2.0.7) and NeoMutt up to 2021-05-04, due to an out-of-bounds read in imap/util.c when an IMAP sequence ends with a comma. The issue is tied to QRESYNC via the $imap_qresync setting (not enabled by default). Remediation per connected advisories incl...