freeswitch sofia-sip vulnerabilities (CVE)

CVE records published for freeswitch sofia-sip, newest first. Follow to get an email when a new one appears.

1 results

5.3Medium

CVE-2026-110658 28 days ago

Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

freeswitch sofia-sip

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-T…