CVE-2026-82608— Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds
Quick assessment
Affected
n/a Kamailio
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kamailio是Kamailio组织开源的一个 SIP 信令服务器的开源实现。 Kamailio 5.5.0及之前版本和6.0.7及之前版本存在缓冲区错误漏洞，该漏洞源于对文件src/modules/ims_registrar_scscf/cxdx_avp.c中get_4bytes函数的操作，可能导致越界读取。攻击者可远程利用。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82608
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called abb5d60af6eefbd367bf6588c5589566b090e272. It is advisable to implement a patch to correct this issue. The vendor points out, that "[v]ersion 5.5.0 is old and not maintained anymore."
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
Kamailio 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kamailio是Kamailio组织开源的一个 SIP 信令服务器的开源实现。 Kamailio 5.5.0及之前版本和6.0.7及之前版本存在缓冲区错误漏洞，该漏洞源于对文件src/modules/ims_registrar_scscf/cxdx_avp.c中get_4bytes函数的操作，可能导致越界读取。攻击者可远程利用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Kamailio | 5.0 |
cpe:2.3:a:kamailio:kamailio:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-82608
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82608
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-82608 (2)
Vendor Advisories for CVE-2026-82608 (2)
-
🔗 CVE-2026-82608 in Kamailio third-party-advisory
-
🔗 CVE-2026-82608 Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds (Issue 4816) vdb-entry technical-description
Proof of Concept for CVE-2026-82608 (1)
Other References for CVE-2026-82608 (1)
Same Patch Batch · n/a · 2026-08-31 · 95 CVEs total
| CVE-2026-82954 | 9.9 CRITICAL | Dokploy Settings application.ts writeTraefikConfigInPath path traversal |
| CVE-2026-82598 | 7.3 HIGH | SeaCMS Template search.php parseIf code injection |
| CVE-2026-82630 | 7.3 HIGH | PowerJob Transport Endpoint TestController.java MuConnectionManager.getOrCreateConnection |
| CVE-2026-82600 | 7.3 HIGH | SeaCMS zyapi.php sql injection |
| CVE-2026-82599 | 5.4 MEDIUM | SeaCMS Avatar Upload member.php unlink path traversal |
| CVE-2026-82603 | 5.4 MEDIUM | SeaCMS Comment Cache member.php del_pl path traversal |
| CVE-2026-82623 | 5.3 MEDIUM | open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange |
| CVE-2026-82602 | 5.3 MEDIUM | SeaCMS ass.php authorization |
| CVE-2026-82805 | 4.3 MEDIUM | Typora Mermaid Rendering cross site scripting |
| CVE-2026-82601 | 4.3 MEDIUM | SeaCMS err.php cross site scripting |
| CVE-2026-82820 | 4.3 MEDIUM | FLVMeta AMF String Processing amf.c amf_string_new heap-based overflow |
| CVE-2026-82821 | 4.3 MEDIUM | FLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereference |
| CVE-2026-82596 | 3.3 LOW | LatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corru |
| CVE-2026-51719 | TOTOLINK T6 安全漏洞 | |
| CVE-2026-51718 | TOTOLINK T6 安全漏洞 | |
| CVE-2026-51720 | TOTOLINK T6 权限许可和访问控制问题漏洞 | |
| CVE-2026-51722 | TOTOLINK T6 安全漏洞 | |
| CVE-2026-51721 | TOTOLINK T6 安全漏洞 | |
| CVE-2026-51728 | TOTOLINK T6 安全漏洞 | |
| CVE-2026-51725 | TOTOLINK T6 权限许可和访问控制问题漏洞 |
Showing top 20 of 95 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Kamailio
-
CVE-2026-108822
Kamailio sipt ss7_parser.c isup_get_calling_party buffer ove -
CVE-2026-93962
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-ba -
CVE-2026-39864
Kamailio Auth: Processing Vulnerability For Additional Authe -
CVE-2026-39863
Kamailio Core: TCP Data Processing Vulnerability -
CVE-2025-12207
Kamailio Grammar Rule cfg.y yyerror_at null pointer derefere
Same weakness: CWE-125
-
CVE-2026-105228
ISPSoft Out-of-Bounds Read Vulnerability -
CVE-2026-105227
ISPSoft Out-of-Bounds Read Vulnerability -
CVE-2026-111376
FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows clip -
CVE-2026-111375
FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Wind -
CVE-2026-111274
unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_ex
V. Comments for CVE-2026-82608
No comments yet