CVE Catalog

CVE-2025-1795

LowCVSS 2.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.60%

45th percentile - higher than 45% of all known CVEs

Summary

During address list folding, when a separating comma ends up on a folded line and that line is to be unicode-encoded, the separator itself is also unicode-encoded instead of remaining a plain comma. This can cause some mail servers to misinterpret the address header.

Risk Assessment

Misinterpretation of the address header may lead to incorrect email delivery or rejection, affecting communication.

Recommendation

Update the mail software to a version that fixes Unicode encoding during address list folding.

Original NVD description (English source)

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS