CVE-2026-90779 — SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A mali…
Published: 2026-09-13 · CVSS: 8.7 · CVSS 4.0
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7