← All advisoriesLow severity2.5NVD Advisory· Published Oct 8, 2026CVE-2026-107570CVE-2026-107570Descriptionheap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.Affected products1Mutt/Muttllm-createPatchesVulnerability mechanicsNews mentions0No linked articles in our index yet.