PT-2026-136963

CVE-2026-121943

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 3.1
4.8
Medium
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip check packet and sip validate packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent stack bytes into displayed SIP fields.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-170: Improper Null Termination
Related identifiers
CVE-2026-121943
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com