sipsorcery vulnerabilities

2 known vulnerabilities in sipsorcery from Sipsorcery-org. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  sipsorcery: Out-of-bounds Read

  CVE-2026-123805Nov 9, 2026Sipsorcery-org

  SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.14, SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields from an attacker-controlled SCTP SACK chunk without checking that the corresponding entries fit the

• 7.5 High severity

  SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET.

  CVE-2026-54632Sep 14, 2026Sipsorcery-org

  SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted bytes without sufficient