CVE Feed

    Dashboard / CVE / CVE-2026-90778

    CVE-2026-90778

    SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the process.

    Published:Sep 13, 2026
    Last Modified:Sep 14, 2026
    EPS:Sep 13, 2026
    EPSS Score:0.00633
    CVSS Score:7.5

    Affected Products

    Vendor
    Sipp
    Product
    Sipp

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-90780 (CVSS 8.7) — SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp…
    CVE-2026-90779 (CVSS 8.7) — SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP au…
    CVE-2018-25356 (CVSS 8.6) — SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that all…
    CVE-2018-25225 (CVSS 8.6) — SIPP 3.3 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to e…
    CVE-2026-0710 (CVSS 8.4) — A flaw was found in SIPp. A remote attacker could exploit this by sending specially crafted Session Initiation…
    CVE-2008-1959 (CVSS 7.5) — Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-90778 — Sipp (High 8.7) | CVE-DB