mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
CVSS Details
CVSS Score
2.5
Severity
LOW
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Configurations (Affected Products)
No configuration data available.
Mutt < 2.3.2
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
/*
* Conceptual Proof of Concept for CVE-2026-43864
* This simulates the NULL pointer dereference in show_sig_summary.
* Compile: gcc -o poc poc.c
*/
#include <stdio.h>
#include <stdlib.h>
// Simulated vulnerable function based on the description
void show_sig_summary(char *sig_data) {
// Vulnerability: Missing NULL check on sig_data
// If sig_data is NULL, this will cause a Segmentation Fault
printf("Signature Summary: %s\n", sig_data);
}
int main(int argc, char *argv[]) {
printf("[+] Triggering CVE-2026-43864 PoC...\n");
// Scenario: Passing a NULL pointer to the function
// This mimics the condition found in Mutt < 2.3.2
char *malicious_input = NULL;
printf("[+] Calling vulnerable function with NULL pointer...\n");
show_sig_summary(malicious_input);
printf("[-] Exploit failed (code should not reach here)\n");
return 0;
}