{"id":"MGASA-2026-0587","summary":"Updated sofia-sip package fixes a security vulnerability","details":"Sofia-SIP through 1.13.18 contains a heap out-of-bounds read\nvulnerability in msg_multipart_parse() that allows unauthenticated\nremote attackers to crash the process by sending oversized MIME\nboundaries. Attackers can send an INVITE with a multipart Content-Type\nwhose boundary exceeds the body length, causing memcmp to read past the\nheap buffer and crash the process.\n","modified":"2026-11-10T16:45:03.103290973Z","published":"2026-11-10T16:31:41Z","upstream":["CVE-2026-110658"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0587.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36625"},{"type":"WEB","url":"https://hackmd.io/@haind-pwn/sofia-sip-multipart-oob-read"},{"type":"WEB","url":"https://github.com/freeswitch/sofia-sip/blob/ad36ac8f755308e8b87f98a505e83d4e408e5cc3/libsofia-sip-ua/msg/msg_mime.c#L404"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/sofia-sip-through-1.13.18-heap-out-of-bounds-read-via-msg-multipart-parse"}],"affected":[{"package":{"name":"sofia-sip","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/sofia-sip?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.19-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0587.json"}}],"schema_version":"1.9.2","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}