mutt vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20221
3. 20232
4. 20267

Newest CVEs

• CVE-2026-107570

  Use of Out-of-range Pointer Offset in mutt

  mutt · mutt

  Low2.5
• CVE-2026-43864

  mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.

  mutt · mutt

  Low2.5
• CVE-2026-43863

  mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.

  mutt · mutt

  Low3.7
• CVE-2026-43862

  In mutt before 2.3.2, the imap_auth_gss security level is mishandled.

  mutt · mutt

  Low3.7
• CVE-2026-43861

  mutt before 2.3.2 does not check for '\0' in url_pct_decode.

  mutt · mutt

  Low3.7
• CVE-2026-43860

  mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.

  mutt · mutt

  Low3.7
• CVE-2026-43859

  mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.

  mutt · mutt

  Low3.7
• CVE-2023-4874

  Undefined Behavior for Input to API in Mutt

  Mutt · Mutt

  Medium4.3
• CVE-2023-4875

  Undefined Behavior for Input to API in Mutt

  Mutt · Mutt

  Low2.2
• CVE-2022-1328

  Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line

  Mutt · Mutt

  Medium4.3