CVE-2026-110679: OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolve this issue. It is advisable to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenSIPSto a version that resolves this vulnerability.Fixed in 3.6.9 - Upgrade
Upgrade
OpenSIPSto a version that resolves this vulnerability.Fixed in 4.0.2
Event History
Frequently Asked Questions
Which deployments are affected?
OpenSIPS deployments running versions up to 3.6.8 or up to 4.0.1 are affected when using the rtpproxy component.
Can this be exploited remotely without credentials or user interaction?
Yes. The vulnerability is remotely reachable, has low attack complexity, and requires neither privileges nor user interaction according to the supplied severity vector.
What is the remediation?
Upgrade OpenSIPS to version 3.6.9 or 4.0.2. The provided information identifies these versions as sufficient to resolve the issue.