A vulnerability was found in Exim up to 4.99.1. It has been declared as problematic. Affected by this issue is some unknown functionality of the component UTF8 Handler. Executing a manipulation can lead to out-of-bounds read.

The identification of this vulnerability is CVE-2026-40686. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.