CVE-2026-110679— OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
Quick assessment
Affected
n/a OpenSIPS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-110679
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolve this issue. It is advisable to upgrade the affected component.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | OpenSIPS | 3.6.0 |
cpe:2.3:a:opensips:opensips:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-110679
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-110679
请登录查看更多情报信息。
Other References for CVE-2026-110679 (3)
Same Patch Batch · n/a · 2026-10-14 · 5 CVEs total
| CVE-2026-107350 | 8.8 HIGH | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer |
| CVE-2026-107349 | 7.5 HIGH | Infinite loop on empty option name in startup options parameter in PgBouncer |
| CVE-2026-110698 | 6.3 MEDIUM | Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write |
| CVE-2026-107348 | 5.9 MEDIUM | Integer overflow causes an infinite loop in message buffer growth in PgBouncer |
IV. Related Vulnerabilities
Same product: OpenSIPS
-
CVE-2026-46334
OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS -
CVE-2026-45809
OpenSIPS: Denial of Service in watcherinfo XML generation fr -
CVE-2026-45705
OpenSIPS: OOB Read in Multipart Body Boundary Parsing -
CVE-2026-45537
OpenSIPS: Global Buffer Overflow in construct_uri -
CVE-2026-45103
OpenSIPS: SIP Message Smuggling via TCP Content-Length Integ
Same weakness: CWE-125
-
CVE-2026-79843
HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability -
CVE-2026-101290
CVE-2026-101290 -
CVE-2026-76667
HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability -
CVE-2026-76666
HPE NonStop EXPAND - Out-of-Bounds memory read -
CVE-2026-76665
HPE NonStop EXPAND - Buffer Overflow vulnerability
V. Comments for CVE-2026-110679
No comments yet