Out Of Bounds Read

Sofia-SIP is vulnerable to an Out-of-bounds Read. This vulnerability is present in the sip_method_d function of sip_parser.c, and it enables an attacker to potentially trigger an application crash by sending a maliciously crafted message containing a malicious SDP (Session Description Protocol) to FreeSWITCH. This type of crash could be induced by the #define MATCH(s, m) (strncmp(s, m, n = sizeof(m) - 1) == 0) code, which might result in an increased value of n and subsequently lead to an out-of-bounds access when evaluating IS_NON_WS(s[n]).