CVE-2026-107570

heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template.

Credits

Calif.io, in collaboration with Anthropic

References