CVE-2026-90558

Name of the Vulnerable Software and Affected Versions sngrep versions prior to 1.8.4-2.1

Description Stack buffer overflow issues exist in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. An attacker can send malicious SIP packets containing oversized header fields, such as Call-ID or X-Call-ID, to overflow stack buffers. This can lead to application crashes or the execution of arbitrary code during the parsing and rendering of packets.

Recommendations Update sngrep to version 1.8.4-2.1 or later.