CVE-2026-43859

Summary

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest.

Affected Software

Weaknesses

• CWE-158: CWE-158 Improper Neutralization of Null Byte or NUL Character

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/muttmua/mutt/commit/834c5a2ed0479e51e8662a31caed129f136f4805

• ←Previous
• Next→