High severity7.5NVD Advisory· Published Sep 13, 2026

CVE-2026-90778

Description

SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sipp/Sippreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.7.7

Patches

Vulnerability mechanics

References

github.com/SIPp/sipp/blob/v3.7.7/src/sip_parser.cppnvd
github.com/SIPp/sipp/commit/ddf22d1a54e0396b2e18ebaf4cf5a3fa860e5da4nvd
github.com/SIPp/sipp/pull/879nvd
www.vulncheck.com/advisories/sipp-through-3.7.7-buffer-overflow-via-sip-to-header-tagnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000