CVE-2026-107570

A heap out-of-bounds write vulnerability exists in the convert_file_from_to() function, which can be exploited through a crafted Content-Type header when email templates are processed. This could potentially lead to memory corruption, allowing an attacker to manipulate application behavior or execute arbitrary code. Organizations utilizing email templating features in their applications should prioritize patching this vulnerability, despite its low severity rating.