CVE-2026-107570

Published: Ott 08, 2026 Last Modified: Ott 08, 2026

ExploitDB:

Other exploit source:

Google Dorks:

LOW 2,5

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: none

User Interaction: required

Scope: unchanged

Confidentiality: none

Integrity: low

Availability: none

AI Translation Available

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

823

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Confidentiality Availability Integrity

Potential Impacts:

Read Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands Modify Memory

Languages: Memory-Unsafe, C, C++