CyberRota Analysis
AI-GeneratedCyrus IMAP versions up to 3.12.2 are vulnerable due to a heap exposure issue in nested MIME comment parsing, allowing authenticated users to craft malicious email messages that exploit this flaw. This could lead to unauthorized access to sensitive data in memory, as the server may inadvertently return heap content to the user. Organizations using affected versions should prioritize patching this vulnerability to mitigate potential data leakage risks.
Original NVD Description
An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. There is heap exposure in nested MIME comment parsing. An authenticated IMAP user could craft an email message containing an RFC 822 comment ending with a backslash. When parsing the message, the server would read past the message's end in memory, and read into the heap, returning the read content to the user.