https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T13:25:09.882407+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110658 fkie_cve-2026-110658 2026-10-15T13:25:10.000898+00:00

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length, causing memcmp to read past the heap buffer and crash the process.

 https://db.gcve.eu/vuln/ghsa-9vj3-xq9j-5vq6 GHSA-9vj3-xq9j-5vq6 2026-10-15T13:25:10.001002+00:00

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length, causing memcmp to read past the heap buffer and crash the process.