CVE-2026-116266

MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous. The multipartboundary method decodes RFC 2047 encoded words anywhere in the boundary, but the ambiguity check only fires when the whole value is one encoded wor...

CVE-2026-116266 MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous

MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous. The multipartboundary method decodes RFC 2047 encoded words anywhere in the boundary, but the ambiguity check only fires when the whole value is one encoded wor...

CVE-2026-116266

The MIME::Head component in Perl (versions 5.518 through 5.520 ) is vulnerable to an interpretation conflict where the multipart_boundary() method decodes RFC 2047 encoded words within a multipart boundary but fails to flag the parse as ambiguous unless the entire value is a single encoded word. ...