CVE-2026-110658

Deferred Deferred - Pending Action

Heap Out-of-Bounds Read in Sofia-SIP

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulnCheck

Description

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length, causing memcmp to read past the heap buffer and crash the process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110658

EUVD

EUVD-2026-101131

Affected Vendors & Products

Vendor	Product	Version / Range
freeswitch	sofia-sip	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

CVE-2026-110658 is a heap out-of-bounds read vulnerability in the Sofia-SIP library through version 1.13.18. It occurs in the msg_multipart_parse() function when processing MIME multipart boundaries. Attackers can send a SIP INVITE request with a multipart Content-Type header where the boundary string exceeds the actual body length. This causes the memcmp function to read past the allocated heap buffer, crashing the process. The flaw is triggered by insufficient validation of boundary parameters during MIME parsing.

Detection Guidance

To detect this vulnerability, monitor SIP traffic for INVITE requests with multipart Content-Type headers containing unusually long boundary parameters. Check Sofia-SIP logs for crashes or segmentation faults during MIME multipart parsing. Use network sniffing tools like tcpdump or Wireshark to capture and analyze SIP messages for malformed boundaries.

Impact Analysis

This vulnerability allows unauthenticated remote attackers to crash applications using the Sofia-SIP library by sending specially crafted SIP messages. The impact includes denial of service, as the affected process will terminate unexpectedly. Systems relying on Sofia-SIP for VoIP, IM, or real-time communication services may become unavailable. The attack does not require authentication and can be executed remotely over a network.

Compliance Impact

This vulnerability primarily causes denial of service by crashing the Sofia-SIP process, which could disrupt VoIP or real-time communication services. It does not directly lead to data breaches or unauthorized access, so its impact on GDPR or HIPAA compliance would be indirect through service disruption rather than data exposure.

Mitigation Strategies

Immediately update Sofia-SIP to a patched version if available. If not, restrict network access to SIP services via firewalls to limit exposure. Monitor for suspicious SIP traffic patterns and disable multipart MIME parsing if not required. Apply input validation to reject oversized boundary parameters in Content-Type headers.

Hi! I’m here to help you understand CVE-2026-110658. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70