Out-of-Bounds Read in OpenSIPS SIP Server Implementation
CVE-2026-45705
5.3MEDIUM
What is CVE-2026-45705?
The OpenSIPS SIP server implementation exhibits an out-of-bounds read vulnerability within its multipart body parser. When processing SIP messages with a 'Content-Type: multipart/mixed' header, the find_line_delimiter() function may read beyond the intended buffer size, especially near message boundaries. The flaw occurs when the body contains the '--' sequence close to its end without an expected boundary delimiter. This bug has been addressed in versions 3.6.6 and 4.0.0-rc1, mitigating potential exploitation risks.
Affected Version(s)
opensips >= 3.4.0, < 3.6.6 < 3.4.0, 3.6.6
opensips >= 4.0.0-beta, < 4.0.0-rc1 < 4.0.0-beta, 4.0.0-rc1