HIGH

CVE-2026-90780

2026-09-13 CVSS v3.1

CVSS

7.5

Description

SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding 20,490 bytes. Unauthenticated remote attackers can send crafted SIP messages with oversized headers to overflow the static buffer and crash the process.

Weakness (CWE)

CWE-120 Classic Buffer Overflow

EPSS Score

0.63%

Probability of exploitation in next 30 days

48.9th percentile

References

https://github.com/SIPp/sipp https://github.com/SIPp/sipp/blob/v3.7.7/src/sip_parser.cpp#L164-L227 https://github.com/SIPp/sipp/commit/8ddfb43359703e665041a955543e07f504f80232 https://github.com/SIPp/sipp/pull/881 https://www.vulncheck.com/advisories/sipp-through-3.7.7-buffer-overflow-via-oversized-sip-header-content

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE