Buffer overflow in Opensips

CVE-2026-45809

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher…

Vulnerability class: Buffer Overflow

Affected products

Opensips — versions >= 3.4.0, < 3.6.6, >= 4.0.0-beta, < 4.0.0-rc1

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)