CVE-2026-43864 Mutt空指针解引用漏洞

/* * Conceptual Proof of Concept for CVE-2026-43864 * This simulates the NULL pointer dereference in show_sig_summary. * Compile: gcc -o poc poc.c */ #include <stdio.h> #include <stdlib.h> // Simulated vulnerable function based on the description void show_sig_summary(char *sig_data) { // Vulnerability: Missing NULL check on sig_data // If sig_data is NULL, this will cause a Segmentation Fault printf("Signature Summary: %s\n", sig_data); } int main(int argc, char *argv[]) { printf("[+] Triggering CVE-2026-43864 PoC...\n"); // Scenario: Passing a NULL pointer to the function // This mimics the condition found in Mutt < 2.3.2 char *malicious_input = NULL; printf("[+] Calling vulnerable function with NULL pointer...\n"); show_sig_summary(malicious_input); printf("[-] Exploit failed (code should not reach here)\n"); return 0; }