CERT24CVE-2026-123805 — SIPSorcery unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read and terminate the data-channel receive threadLoading data…
CERT24Threat Observatory
Period

CVE-2026-123805 — SIPSorcery unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read and terminate the data-channel receive thread

SIPSorcery processes attacker-controlled SCTP SACK gap-ack and duplicate-TSN counts without validating them. A crafted SACK packet can cause an out-of-bounds read that terminates the SCTP receive thread, permanently disabling the association and all data channels.

← Back to intelligence

CVE-2026-123805 — SIPSorcery unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read and terminate the data-channel receive thread

SIPSorcery processes attacker-controlled SCTP SACK gap-ack and duplicate-TSN counts without validating them. A crafted SACK packet can cause an out-of-bounds read that terminates the SCTP receive thread, permanently disabling the association and all data channels.