CVE-2026-93962

Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 6.0.8

Description A heap-based buffer overflow can be triggered remotely within the CDP Diameter Receiver component. The issue resides in the shm malloc() function located in the src/modules/cdp/receiver.c file. A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially leading to crashes or arbitrary code execution.

Recommendations Upgrade to version 6.0.8. As a temporary mitigation, restrict access to the CDP Diameter Receiver component.