Buffer Underflow Vulnerability in Mutt Email Client

CVE-2026-43861

What is CVE-2026-43861?

An issue in Mutt, the email client, prior to version 2.3.2, involves a failure to properly handle the URL decoding process. Specifically, the application does not account for null characters ('\0') when decoding URLs, which can result in unexpected behavior or crashes. This oversight could potentially be exploited by an attacker, leading to compromised system integrity and unauthorized access. Users are encouraged to update to the latest version to mitigate this vulnerability.

References