CVE-2026-121943
Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet…
- Risk score
- 47/100
- CVSS
- 4.8 v3.1
- Exploit chance (30 days)
- 5.6%
- Published
- 4 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent stack bytes into …
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 4.8 medium
- Exploitation likely: EPSS 5.6% (top 7%)
References
- https://github.com/irontec/sngrep/blob/v1.9.0/src/sip.c#L396-L410
- https://github.com/irontec/sngrep/issues/589
- https://hackmd.io/@haindpwn/sngrep-sip-payload-missing-nul-oob-read
- https://www.vulncheck.com/advisories/irontec-sngrep-through-1.9.0-out-of-bounds-stack-read-via-sip-check-packet
- https://hackmd.io/@haindpwn/cve-2026-121943-121944-sngrep-sip-payload-missing-nul-oob-read
Original description
Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent stack bytes into displayed SIP fields.
Last activity 4 Nov 2026. Patch Forecast updates every hour.