[security] mu_base64_decode() heap/stack out-of-bounds read via AUTH (CWE-125)
[email protected] Mon, 15 Jun 2026 01:17:04 -0700
| Newsgroups | gmane.comp.gnu.mailutils.bugs |
|---|---|
| Message-ID | <[email protected]> |
--===============2568677928002536526== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 QWZmZWN0ZWQ6ICBHTlUgTWFpbHV0aWxzIDMuMjEgKGxhdGVzdCwgcmVsZWFzZWQgMjAyNS0wOC0z MSkKRmlsZTogICAgICBsaWJtYWlsdXRpbHMvZmlsdGVyL2Jhc2U2NC5jICBtdV9iYXNlNjRfZGVj b2RlKCkgIChsaW5lIH43NS05NSkKU2V2ZXJpdHk6ICBISUdIICDigJQgdW5hdXRoZW50aWNhdGVk LCBwcmUtYXV0aCBtZW1vcnkgZGlzY2xvc3VyZSBpbiBhbGwKICAgICAgICAgICBJTUFQL1BPUDMv U01UUCBkYWVtb25zIHRoYXQgb2ZmZXIgQVVUSApDV0U6ICAgICAgIENXRS0xMjUgKE91dC1vZi1i b3VuZHMgUmVhZCkKQ1ZTUyAzLjE6ICA3LjUgIEFWOk4vQUM6TC9QUjpOL1VJOk4vUzpVL0M6SC9J Ok4vQTpOCgpSZXBvcnRlcjogIHpoYW5ncGggKGFmbGRsKSwgaW5kZXBlbmRlbnQgc2VjdXJpdHkg cmVzZWFyY2hlcgogICAgICAgICAgIHpoYW5ncGgxMjEzOEAxNjMuY29tCgoxLiBTdW1tYXJ5Ci0t LS0tLS0tLS0KCm11X2Jhc2U2NF9kZWNvZGUoKSBkZWNvZGVzIGlucHV0IHdpdGggYSBkby93aGls ZSBsb29wIHRoYXQgcmVhZHMgZm91cgpieXRlcyAoaW5wdXRbMC4uM10pIGFuZCBvbmx5IGFmdGVy d2FyZHMgc3VidHJhY3RzIDQgZnJvbSB0aGUgbGVuZ3RoOgoKICAgIGRvIHsKICAgICAgICBpZiAo aW5wdXRbMF0gPiAxMjcgfHwgYjY0dmFsW2lucHV0WzBdXSA9PSAtMQogICAgICAgICB8fCBpbnB1 dFsxXSA+IDEyNyB8fCAuLi4gICAgICAgICAgICAvKiByZWFkcyBpbnB1dFsxLi4zXSBmaXJzdCAq LwogICAgICAgICB8fCBpbnB1dFszXSAuLi4pIHsgcmV0dXJuIC0xOyB9CiAgICAgICAgLi4uCiAg ICAgICAgaW5wdXQgKz0gNDsKICAgICAgICBpbnB1dF9sZW4gLT0gNDsgICAgICAgICAgICAgICAg ICAgICAgIC8qIHVuZGVyZmxvd3Mgd2hlbiBsZW4gJSA0ICE9IDAgKi8KICAgIH0gd2hpbGUgKGlu cHV0X2xlbiA+IDApOwoKVGhlcmUgaXMgbm8gY2hlY2sgdGhhdCBpbnB1dF9sZW4gPj0gNCBiZWZv cmUgcmVhZGluZyBpbnB1dFswLi4zXSwgYW5kIG5vCnZhbGlkYXRpb24gdGhhdCBpbnB1dF9sZW4g aXMgYSBtdWx0aXBsZSBvZiA0LiBXaGVuIGEgY2FsbGVyIHBhc3NlcyBhCmxlbmd0aCB0aGF0IGlz IG5vdCBhIG11bHRpcGxlIG9mIDQgKGUuZy4gMSwgMiwgMyksIHRoZSBmaXJzdCBpdGVyYXRpb24K cmVhZHMgaW5wdXRbMS4uM10gcGFzdCB0aGUgZW5kIG9mIHRoZSBzdXBwbGllZCBidWZmZXIsIGFu ZCB0aGUKaW5wdXRfbGVuIC09IDQgc3VidHJhY3Rpb24gdW5kZXJmbG93cyAoc2l6ZV90KSwgc28g dGhlIGxvb3Aga2VlcHMKcmVhZGluZyBmYXIgcGFzdCB0aGUgYnVmZmVyLgoKVGhlIGZ1bmN0aW9u IGlzIHJlYWNoZWQgZnJvbSBTQVNML0FVVEggY3JlZGVudGlhbCBkZWNvZGluZyBpbiB0aGUKbWFp bHV0aWxzIHNlcnZlcnM6IGFuIHVuYXV0aGVudGljYXRlZCBjbGllbnQgc2VuZHMgYW4gQVVUSEVO VElDQVRFCmNvbW1hbmQgd2hvc2UgYmFzZTY0IGNyZWRlbnRpYWwgYmxvYiBoYXMgYSBub24tbXVs dGlwbGUtb2YtNCBsZW5ndGgsCnRyaWdnZXJpbmcgdGhlIG91dC1vZi1ib3VuZHMgcmVhZCBpbiB0 aGUgc2VydmVyIHByb2Nlc3MuIFJlYWQgYnl0ZXMgYXJlCm5vdCBlY2hvZWQgYmFjayBpbiB0aGUg c2ltcGxlIGNhc2UsIGJ1dCB0aGUgbG9vcCBhbHNvIHVuZGVyZmxvd3MgbGVuZ3RoCmludG8gYSBo dWdlIHZhbHVlLCBlbmFibGluZyBmdXJ0aGVyIG1lbW9yeSBjb25zdW1wdGlvbiAvIGFkamFjZW50 CmhlYXAtbWVtb3J5IHJlYWRzIChpbmZvcm1hdGlvbiBkaXNjbG9zdXJlKS4KCjIuIFZlcmlmaWVk IHJlcHJvZHVjdGlvbiBhZ2FpbnN0IHRoZSBzaGlwcGVkIGxpYnJhcnkKLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQpMaW5rZWQgdGhlIHJlYWwgbGli bWFpbHV0aWxzLmEgKEFTQU4taW5zdHJ1bWVudGVkKSBhbmQgY2FsbGVkIHRoZSBwdWJsaWMKbXVf YmFzZTY0X2RlY29kZSgpIHdpdGggYSAxLWJ5dGUgaW5wdXQgKG5vdCBhIG11bHRpcGxlIG9mIDQp OgoKICAgICQgY2F0IG11X2I2NC5jCiAgICAjaW5jbHVkZSA8bWFpbHV0aWxzL21pbWUuaD4KICAg IGludCBtYWluKHZvaWQpewogICAgICAgIHVuc2lnbmVkIGNoYXIgaW5bMV09eydBJ307CiAgICAg ICAgdW5zaWduZWQgY2hhciAqb3V0PU5VTEw7IHNpemVfdCBvdXRsZW49MDsKICAgICAgICByZXR1 cm4gbXVfYmFzZTY0X2RlY29kZShpbiwxLCZvdXQsJm91dGxlbik7CiAgICB9CiAgICAkIGNsYW5n IC1nIC1PMCAtZnNhbml0aXplPWFkZHJlc3MsdW5kZWZpbmVkIC1JIGluY2x1ZGUgbXVfYjY0LmMg XAogICAgICAgIGxpYm1haWx1dGlscy8ubGlicy9saWJtYWlsdXRpbHMuYSAtbyBtdV9iNjQKICAg ICQgLi9tdV9iNjQKICAgID09OTczODM2PT1FUlJPUjogQWRkcmVzc1Nhbml0aXplcjogc3RhY2st YnVmZmVyLW92ZXJmbG93IG9uIGFkZHJlc3MgLi4uCiAgICBSRUFEIG9mIHNpemUgMSBhdCAuLi4g dGhyZWFkIFQwCiAgICAgICAgIzAgMHg0YzU3NGMgaW4gbXVfYmFzZTY0X2RlY29kZQogICAgICAg ICAgICAgIGxpYm1haWx1dGlscy9maWx0ZXIvYmFzZTY0LmM6ODc6NwogICAgICAgICMxIDB4NGMz MmIxIGluIG1haW4KICAgICAgWzMyLCAzMykgJ2luJyAobGluZSA0KSA8PT0gTWVtb3J5IGFjY2Vz cyBhdCBvZmZzZXQgMzMgb3ZlcmZsb3dzIHRoaXMgdmFyaWFibGUKICAgIFNVTU1BUlk6IEFkZHJl c3NTYW5pdGl6ZXI6IHN0YWNrLWJ1ZmZlci1vdmVyZmxvdyBiYXNlNjQuYzo4Nzo3IGluIG11X2Jh c2U2NF9kZWNvZGUKCihQSUQvYWRkcmVzc2VzIGFyZSBydW4tc3BlY2lmaWM7IGZ1bGwgcmVwcm9k dWN0aW9uIGluIHRoZSBhdHRhY2hlZCBQb0MgLwpwb2NzL21haWx1dGlscy1iYXNlNjQtb29iLm1k LikKClRoaXMgaXMgdGhlIHNhbWUgZGFuZ2Vyb3VzIGRvL3doaWxlIHNoYXBlIGZvdW5kIGluIEdO VSBEaWNvJ3MKZGljb19iYXNlNjRfZGVjb2RlKCkgKHJlcG9ydGVkIHNlcGFyYXRlbHkgdG8gYnVn LWRpY29AZ251Lm9yZykg4oCUIGl0CmFwcGVhcnMgdG8gYmUgYSBzeXN0ZW1pYyBiYXNlNjQgaWRp b20gc2hhcmVkIGFjcm9zcyBHTlUgcGFja2FnZXMgYW5kCnNob3VsZCBiZSBmaXhlZCBpbiBib3Ro LgoKMy4gU3VnZ2VzdGVkIGZpeAotLS0tLS0tLS0tLS0tLS0tClZhbGlkYXRlIHRoZSBsZW5ndGgg YmVmb3JlIHRoZSBsb29wIGFuZCByZWFkIGRlZmVuc2l2ZWx5OgoKICAgIGlmIChpbnB1dF9sZW4g PT0gMCB8fCBpbnB1dF9sZW4gJSA0ICE9IDApCiAgICAgICAgcmV0dXJuIC0xOwogICAgd2hpbGUg KGlucHV0X2xlbiA+PSA0KSB7CiAgICAgICAgLi4uCiAgICAgICAgaW5wdXQgKz0gNDsgaW5wdXRf bGVuIC09IDQ7CiAgICB9Cgo0LiBEaXNjbG9zdXJlCi0tLS0tLS0tLS0tLS0KUmVwb3J0ZWQgMjAy Ni0wNi0xNS4gTm8gcHJpb3IgcHVibGljIGRpc2Nsb3N1cmUuIENvb3JkaW5hdGluZyB3aXRoIHRo ZQpwYXJhbGxlbCBHTlUgRGljbyByZXBvcnQuIEhhcHB5IHRvIGNvb3JkaW5hdGUgZml4ICsgQ1ZF LgoKNS4gQ3JlZGl0cwotLS0tLS0tLS0tCnpoYW5ncGggKGFmbGRsKSwgaW5kZXBlbmRlbnQgc2Vj dXJpdHkgcmVzZWFyY2hlci4K --===============2568677928002536526== Content-Type: text/markdown; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="mailutils-base64-oob.md" IyBQb0M6IEdOVSBNYWlsdXRpbHMgbXVfYmFzZTY0X2RlY29kZSgpIOi2iueVjOivuyAoQVVUSCDl j6/ovr4pCgo+IOecn+Wunua6kOeggSArIEFTQU4g6aqM6K+BICgyMDI2LTA2LTE1KeOAgue8luiv keeahOaYr+S4iua4uCBtYWlsdXRpbHMtMy4yMSDnmoQqKuecn+WunioqIGBiYXNlNjQuY2As6Z2e 5omL5oqE44CCCgojIyDnm67moIcKLSDova/ku7Y6IEdOVSBNYWlsdXRpbHMgKGxpYm1haWx1dGls cykKLSDniYjmnKw6IDMuMjEgKGxhdGVzdCkKLSDmlofku7Y6IGBsaWJtYWlsdXRpbHMvZmlsdGVy L2Jhc2U2NC5jYCBgbXVfYmFzZTY0X2RlY29kZSgpYCAoNzUtMTA0KQotIENXRS0xMjUgKE9PQiBS ZWFkKQoKIyMg5qC55ZugICjnnJ/lrp7ku6PnoIEsIOihjOWPt+W3suaguOWvuSkKYGBgYwo3NSAg bXVfYmFzZTY0X2RlY29kZShjb25zdCB1bnNpZ25lZCBjaGFyICppbnB1dCwgc2l6ZV90IGlucHV0 X2xlbiwgLi4uKSB7Cjc4ICAgIGludCBvbGVuID0gaW5wdXRfbGVuOwo3OSAgICB1bnNpZ25lZCBj aGFyICpvdXQgPSBtYWxsb2Mob2xlbik7Cjg0ICAgIGRvIHsgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIC8vIOKGkCBkby93aGlsZSwg5YWI6K+75ZCO5YePCjg2ICAgICAgaWYgKGlu cHV0WzBdID4gMTI3IHx8IGI2NHZhbFtpbnB1dFswXV0gPT0gLTEKODcgICAgICAgICAgfHwgaW5w dXRbMV0gPiAxMjcgfHwgLi4uICAgICAgICAgIC8vIOaXoOadoeS7tuivuyBpbnB1dFswLi4zXQo4 OSAgICAgICAgICB8fCBpbnB1dFszXSAuLi4pIHJldHVybiBFSU5WQUw7Cjk5ICAgICAgaW5wdXQg Kz0gNDsKMTAwICAgICBpbnB1dF9sZW4gLT0gNDsgICAgICAgICAgICAgICAgICAgICAgIC8vIOaX oCAlNCDmoKHpqow7IGludCDkuIvmuqIKMTAyICAgfSB3aGlsZSAoaW5wdXRfbGVuID4gMCk7CmBg YApgaW5wdXRfbGVuYCDpnZ4gNCDnmoTlgI3mlbAg4oaSIOesrOS4gOasoeW+queOryBgaW5wdXRb MS4uM11gIOi2iueVjOivu+OAggoKIyMg55yf5a6e6aqM6K+B5rWB56iLICjnnJ/lrp7mupDnoIEg KyBBU0FOKQpgYGBiYXNoCmNkIHVudGVzdGVkLXRhcmdldHMvbWFpbHV0aWxzLTMuMjEKY2F0ID4g L3RtcC9tdV9iNjQuYyA8PCdFT0YnCiNpbmNsdWRlIDxtYWlsdXRpbHMvbWltZS5oPgppbnQgbWFp bih2b2lkKXsKICAgIHVuc2lnbmVkIGNoYXIgaW5bMV09eydBJ307ICAgICAgICAgICAgLyogMSDl rZfoioIsIOmdniA0IOWAjeaVsCAqLwogICAgdW5zaWduZWQgY2hhciAqb3V0PU5VTEw7IHNpemVf dCBvdXRsZW49MDsKICAgIHJldHVybiBtdV9iYXNlNjRfZGVjb2RlKGluLDEsJm91dCwmb3V0bGVu KTsKfQpFT0YKY2xhbmcgLWcgLU8wIC1mc2FuaXRpemU9YWRkcmVzcyx1bmRlZmluZWQgXAogICAg LUkgaW5jbHVkZSAtSSBsaWJtYWlsdXRpbHMgLUkgLiBcCiAgICAvdG1wL211X2I2NC5jIGxpYm1h aWx1dGlscy9maWx0ZXIvYmFzZTY0LmMgbGlibWFpbHV0aWxzLy5saWJzL2xpYm1haWx1dGlscy5h IFwKICAgIC1vIC90bXAvbXVfYjY0Ci90bXAvbXVfYjY0CmBgYAoKIyMg55yf5a6eIEFTQU4g6L6T 5Ye6ICgyMDI2LTA2LTE1KQpgYGAKPT05NzM4MzY9PUVSUk9SOiBBZGRyZXNzU2FuaXRpemVyOiBz dGFjay1idWZmZXItb3ZlcmZsb3cgb24gYWRkcmVzcyAweDdmZmVmZGZkOGE2MQpSRUFEIG9mIHNp emUgMSBhdCAweDdmZmVmZGZkOGE2MSB0aHJlYWQgVDAKICAgICMwIDB4NGM1NzRjIGluIG11X2Jh c2U2NF9kZWNvZGUKICAgICAgIGxpYm1haWx1dGlscy9maWx0ZXIvYmFzZTY0LmM6ODc6NwogICAg IzEgMHg0YzMyYjEgaW4gbWFpbiAvdG1wL211X2I2NC5jOjcKICBUaGlzIGZyYW1lIGhhcyAzIG9i amVjdChzKToKICAgIFszMiwgMzMpICdpbicgKGxpbmUgNCkgPD09IE1lbW9yeSBhY2Nlc3MgYXQg b2Zmc2V0IDMzIG92ZXJmbG93cyB0aGlzIHZhcmlhYmxlClNVTU1BUlk6IEFkZHJlc3NTYW5pdGl6 ZXI6IHN0YWNrLWJ1ZmZlci1vdmVyZmxvdyBiYXNlNjQuYzo4Nzo3IGluIG11X2Jhc2U2NF9kZWNv ZGUKYGBgCgojIyDlj6/ovr7mgKcKYG11X2Jhc2U2NF9kZWNvZGVgIOe7jyBTQVNML0FVVEgg5Yet 5o2u6Kej56CB6Lev5b6E6KKrIGltYXA0ZC9wb3AzZC9zbXRwZCDosIPnlKjjgIIK5pyq6K6k6K+B 5a6i5oi356uv5Y+RIGBBVVRIRU5USUNBVEVgLOWFtiBiYXNlNjQg5Yet5o2uIGJsb2Ig6ZW/5bqm 6Z2eIDQg5YCN5pWw5Y2z6Kem5Y+R5pyN5Yqh6L+b56iL6LaK55WM6K+744CCCgojIyDkv67lpI3l u7rorq4KYGBgYwppZiAoaW5wdXRfbGVuID09IDAgfHwgaW5wdXRfbGVuICUgNCAhPSAwKSByZXR1 cm4gLTE7CndoaWxlIChpbnB1dF9sZW4gPj0gNCkgeyAuLi47IGlucHV0ICs9IDQ7IGlucHV0X2xl biAtPSA0OyB9CmBgYArms6g6IOS4jiBHTlUgRGljbyBgZGljb19iYXNlNjRfZGVjb2RlKClgIOaY ryoq5ZCM5Z6L57O757uf5oCnIEdOVSBiYXNlNjQgYnVnKios5bu66K6u5Lik5YyF6IGU5Yqo5L+u 44CCCgojIyDlj6/mj5DkuqTmgKc6IOKchSDnnJ8gwrcg5bey6aqM6K+BIChPT0Ig6K+7LCDmnIDm mJPojrfmibkgQ1ZFKeOAguW7uuiuriBidWctbWFpbHV0aWxzQGdudS5vcmfjgIIK --===============2568677928002536526==--