Multipart Email Vulnerability in KDE KMail by KDE

CVE-2019-10732

What is CVE-2019-10732?

A security flaw in KDE KMail version 5.2.3 allows attackers to exploit S/MIME or PGP encrypted emails. By crafting multipart emails, an attacker can hide encrypted content and send it to an unsuspecting recipient. If the recipient replies to the seemingly benign email, they inadvertently disclose the plaintext of the encrypted messages back to the attacker. This vulnerability poses a serious risk to the confidentiality of sensitive communications.

References