Is CVE-2026-107570 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-107570?

CVE-2026-107570 has a CVSS v3 severity of LOW (2.5).

Back

Description

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.