CyberSecBulletin

Sipsorcery-org vulnerabilities

We track 2 vulnerabilities in Sipsorcery-org products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Sipsorcery-org vulnerabilities

  • 7.5 High severity

    sipsorcery: Out-of-bounds Read

    CVE-2026-123805Sipsorcery-org

    SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.14, SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields from an attacker-controlled SCTP SACK chunk without checking that the corresponding entries fit the

  • 7.5 High severity

    SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET.

    CVE-2026-54632Sipsorcery-org

    SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted bytes without sufficient