CVE-2026-110658

A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...

UBUNTU-CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP versions through 1.13.18 are vulnerable to a heap out-of-bounds read in the msg_multipart_parse() function. An unauthenticated remote attacker can trigger this vulnerability by sending an INVITE request with a multipart Content-Type where the boundary exceeds the actual body length. Thi...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

EUVD-2026-101131

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658: Out-of-bounds Read

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

PT-2026-114098

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg multipart parse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body...

Security update for sofia-sip (important)

openSUSE Security Update: Security update for sofia-sip Announcement ID: openSUSE-SU-2026:0330-1 Rating: important References: 1200116 1200117 1200118 Cross-References: CVE-2022-31001 CVE-2022-31002 CVE-2022-31003 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three...

OESA-2026-2682 sofia-sip security update

Sofia SIP is a RFC-3261-compliant library for SIP user agents and other network elements. The Session Initiation Protocol SIP is an application-layer control signaling protocol for creating, modifying, and terminating sessions with one or more participants. These sessions include Internet telepho...

OESA-2026-2683 sofia-sip security update

Sofia SIP is a RFC-3261-compliant library for SIP user agents and other network elements. The Session Initiation Protocol SIP is an application-layer control signaling protocol for creating, modifying, and terminating sessions with one or more participants. These sessions include Internet telepho...

EUVD-2023-36559

Malicious code in bioql PyPI...

EUVD-2023-26859

Malicious code in bioql PyPI...

EUVD-2022-52708

Malicious code in bioql PyPI...

Sofia-SIP Buffer Overflow DoS

The vulnerability of the Sofia-SIP user agent library session initiation protocol is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Sofia-SIP Heap Buffer Overflow DoS

The vulnerability of the Sofia-SIP user agent library session initiation protocol relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...