EIP-2026-103974

The vulnerability is a buffer overflow in Lynx's built-in mailer due to improper handling of long email addresses in 'mailto:' URLs. The exploit involves crafting a hyperlink with an excessively long email address (over 2 kB of 'A's) to trigger the overflow in LMail.c.