← All advisories

Low severity3.7NVD Advisory· Published May 4, 2026· Updated Jun 17, 2026

CVE-2026-43859

CVE-2026-43859

Description

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mutt/Muttreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.3.2
osv-coords2 versions
pkg:rpm/opensuse/mutt&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/mutt&distro=openSUSE%20Tumbleweed
< 2.2.16-160000.2.1+ 1 more
- (no CPE)range: < 2.2.16-160000.2.1
- (no CPE)range: < 2.3.2-1.1

Patches

Vulnerability mechanics

References

1

github.com/muttmua/mutt/commit/834c5a2ed0479e51e8662a31caed129f136f4805nvd

News mentions

0

No linked articles in our index yet.