VDB
GCVE-110-MAGEIA-2026-587
GCVE-110-MAGEIA-2026-587
Advisory Published
Sofia-SIP through 1.13.18 contains a heap out-of-bounds read
vulnerability in msg_multipart_parse() that allows unauthenticated
remote attackers to crash the process by sending oversized MIME
boundaries. Attackers can send an INVITE with a multipart Content-Type
whose boundary exceeds the body length, causing memcmp to read past the
heap buffer and crash the process.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | sofia-sip | 0 (affected), 1.13.19-1.mga10 (unaffected) | — |
References
Browse GCVE Records
851 records in the GCVE database · Updated November 12, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.