Skip to content
OpenAdvisories

Vendor

sipsorcery-org

2 known vulnerabilities.

Products

sipsorcery 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-123805

    SIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS)

    SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.14, SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields from an attacker-controlled SCTP SACK chunk without checking that the corresponding entries fit the…

    sipsorcery-org sipsorcery
  • High 7.5
    CVE-2026-54632

    SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

    SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted bytes without sufficien…

    sipsorcery-org sipsorcery SIPSorcery NuGet