CVE-2021-44143

The CVE-2021-44143 issue affects isync (mbsync) in versions prior to 1.4.4 (1.4.0–1.4.3). An unchecked condition in processing a crafted IMAP message lacking headers (starts with an empty line) can provoke a heap overflow, potentially enabling remote code execution on the client. Remediation: upg...

CVE-2021-3657

CVE-2021-3657 affects mbsync (isync) versions before 1.4.4. The vulnerability stems from inadequate handling of extremely large IMAP literals (≥2 GiB), allowing a malicious or compromised IMAP server, and potentially external senders, to trigger buffer overflows that could be exploited for remote...