sipsorcery-org sipsorcery vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 7.5CVE-2026-123805EPSS 0.4%2026-11-09

   SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.14, SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields from an attacker-controlled SCTP SACK chunk without checking that the correspon…

2. 7.5CVE-2026-54632EPSS 0.7%2026-09-14

   SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived and the STUNAttribute.ParseMessageAttributes, STUNXORAddressAttribute, and STUNAddressAttribute parsing path index untrusted byt…