CVE-2020-28016

score

<0.1

cvss

7.8

epss

0.4%

published

2021-05-06

kev added

—

first seen

2026-10-21

Exim 4 < 4.94.2 contains an off-by-two out-of-bounds write caused by mishandling of '-F ''' in parse_fix_phrase, letting attackers cause memory corruption, exploit requires sending a crafted email.