← All advisories

Low severity3.7NVD Advisory· Published May 4, 2026· Updated Jun 17, 2026

CVE-2026-43861

CVE-2026-43861

Description

mutt before 2.3.2 does not check for '\0' in url_pct_decode.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mutt/Muttreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.3.2
osv-coords2 versions
pkg:rpm/opensuse/mutt&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/mutt&distro=openSUSE%20Tumbleweed
< 2.2.16-160000.2.1+ 1 more
- (no CPE)range: < 2.2.16-160000.2.1
- (no CPE)range: < 2.3.2-1.1

Patches

Vulnerability mechanics

References

1

github.com/muttmua/mutt/commit/12f54fe3b61f761c096fe95e95d5e3072af00ed2nvd

News mentions

0

No linked articles in our index yet.