An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14356