CVE-2026-90779

SIPp through version 3.7.7 is affected by a stack buffer overflow in the createAuthHeader() function. The vulnerability is triggered when processing SIP authentication challenges (HTTP 401 or 407) containing oversized algorithm parameters , allowing a malicious SIP server to corrupt the stack and...

EUVD-2026-77003

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process...