NULL pointer dereference in Opensips

CVE-2026-45084

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handle_publish() function processes a SIP PUBL…

Affected products

  • Opensips — versions >= 3.4.0, < 3.6.6, >= 4.0.0-beta, < 4.0.0-rc1

Weakness classification (CWE)

References