Process-memory disclosure via zero-length IMAP FETCH

Heap buffer over-read in Modizer before 4.3 allows remote attackers to disclose process memory or crash the app via a zero-length IMAP FETCH response. The bundled curl imap_state_fetch_resp function passes a zero-length, non-terminated heap buffer to Curl_client_write, whose delivery path calls strlen and reads beyond the allocation. The vulnerable path requires the bundled client to process a crafted response from an attacker-controlled IMAP server; the established consequences are memory disclosure and a crash, not data modification.