CVE-2026-123805 | sipsorcery-org SIPSorcery up to 10.0.13 SCTP SACK Chunk Parser SctpSackChunk.ParseChunk numGapAckBlocks/numDuplicateTSNs out-of-bounds

A vulnerability labeled as problematic has been found in sipsorcery-org SIPSorcery up to 10.0.13. Affected is the function SctpSackChunk.ParseChunk of the component SCTP SACK Chunk Parser. Executing a manipulation of the argument numGapAckBlocks/numDuplicateTSNs can lead to out-of-bounds read.

This vulnerability is handled as CVE-2026-123805. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More