{"id":"CVE-2026-90778","summary":"SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag","details":"SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the process.","modified":"2026-09-16T08:11:39.424573Z","published":"2026-09-13T11:42:27.756Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-120"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90778.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90778.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90778"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/sipp-through-3.7.7-buffer-overflow-via-sip-to-header-tag"},{"type":"FIX","url":"https://github.com/SIPp/sipp/commit/ddf22d1a54e0396b2e18ebaf4cf5a3fa860e5da4"},{"type":"FIX","url":"https://github.com/SIPp/sipp/pull/879"},{"type":"PACKAGE","url":"https://github.com/SIPp/sipp"},{"type":"ARTICLE","url":"https://github.com/SIPp/sipp/blob/v3.7.7/src/sip_parser.cpp#L76-L113"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sipp/sipp","events":[{"introduced":"0"},{"fixed":"369b3c187f0ff96f3ec9795650820e80cf17c776"},{"fixed":"ddf22d1a54e0396b2e18ebaf4cf5a3fa860e5da4"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.7.7"}],"source":["DESCRIPTION","REFERENCES"]}}],"versions":["v3.7.6","v3.7.5","v3.7.3","v3.7.2","v3.7.1","v3.7.0","v3.7.0_rc1","v3.7-dev","v3.6.0","v3.6.0_rc1","v3.6-dev","v3.5.1-rc1","v3.5.0","v3.5.0-rc4","v3.5.0-rc2","v3.5.0-rc1","v3.4.1","3.4-beta2","3.4-beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90778.json","vanir_signatures_modified":"2026-09-16T08:11:39Z","vanir_signatures":[{"digest":{"function_hash":"9976261197102184989196215132784419593","length":1216},"id":"CVE-2026-90778-08ed8213","signature_type":"Function","signature_version":"v1","source":"https://github.com/sipp/sipp/commit/369b3c187f0ff96f3ec9795650820e80cf17c776","target":{"file":"src/prepare_pcap.c","function":"prepare_dtmf"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sipp/sipp/commit/369b3c187f0ff96f3ec9795650820e80cf17c776","target":{"file":"src/prepare_pcap.c"},"deprecated":false,"digest":{"line_hashes":["253922072885821488052009852498455109366","34586638566681625384682327254929602773","261283247031706384743989698715409911607","298123525681146494129287498515136892063"],"threshold":0.9},"id":"CVE-2026-90778-123fd1ee"},{"signature_version":"v1","source":"https://github.com/sipp/sipp/commit/369b3c187f0ff96f3ec9795650820e80cf17c776","target":{"file":"include/prepare_pcap.h"},"deprecated":false,"digest":{"line_hashes":["252323527340657761663533910122171623862","260503324751946141377959341044348678704","266384485505044202640964179308171686210","50520102943716079966685877244799051816"],"threshold":0.9},"id":"CVE-2026-90778-1ac6a568","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/sipp/sipp/commit/ddf22d1a54e0396b2e18ebaf4cf5a3fa860e5da4","target":{"file":"src/sip_parser.cpp"},"deprecated":false,"digest":{"line_hashes":["121991496320648574498708891285654561428","156595362117382814454096905833628946319","65913322411809472241444882687185922592","81825889921139497088803626367355873288"],"threshold":0.9},"id":"CVE-2026-90778-7017523b","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"224947968659453387934539859938627318708","length":561},"id":"CVE-2026-90778-e282df0d","signature_type":"Function","signature_version":"v1","source":"https://github.com/sipp/sipp/commit/ddf22d1a54e0396b2e18ebaf4cf5a3fa860e5da4","target":{"file":"src/sip_parser.cpp","function":"get_peer_tag"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}