CVE-2026-121943: Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet
Published Nov 4, 2026
·Updated
Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent stack bytes into displayed SIP fields.
Event History
Nov 4, 2026
CVE Published
via MITRE·12:31 PM
Data Sourced
via MITRE·12:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploiting this issue require authentication or user interaction?
No. The CVSS vector indicates no privileges are required and no user interaction is required for exploitation.