Input Validation and Logic

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a long IMAP status mailbox literal count size.CVE-2018-14351Mutt · 3.2% likely

   CWE-20

2. An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/command.c mishandles a NO response without a message.CVE-2018-14349Mutt · 3.2% likely

   CWE-20

3. Mutt does not verify that the smtps server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL SMTP s…CVE-2011-1429Mutt · 1.5% likely

   CWE-20

4. mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.CVE-2026-43863mutt · CVSS 3.7 · 0.2% likely

   CWE-253

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.