CVE-2026-123805

Name of the Vulnerable Software and Affected Versions SIPSorcery versions prior to 10.0.14

Description SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. The SctpSackChunk.ParseChunk function reads the numGapAckBlocks and numDuplicateTSNs fields from an attacker-controlled SCTP SACK chunk without verifying if the entries fit within the declared chunk length or the 262144-byte receive buffer. A negotiated WebRTC peer can send a checksum-valid malformed SACK chunk that forces the parser to read beyond the buffer boundaries. This triggers an IndexOutOfRangeException, which bypasses the recoverable ApplicationException handler in the RTCSctpTransport.DoReceive function. Consequently, the generic exception handler terminates the dedicated receive loop, permanently ending the SCTP association and all associated data channels, resulting in a denial of service.

Recommendations Update SIPSorcery to version 10.0.14.