THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-90779 (HIGH 7.5) — SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client proc

[NVD] CVE-2026-90779 (HIGH 7.5) — SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client proc

mednvdPublished 2026-09-13

CVE-2026-90779 CVSS: 7.5 HIGH Published: 2026-09-13T12:17:16.960

SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.

Indicators of compromise

CVE-2026-90779cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90779