← Database

CVE-2026-90779

HIGH CVSS: 7.5 Published: 2026-09-13 Modified: 2026-09-14

Description

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.

Affected Platforms

Unknown

Weakness Type

CWE-121

References