CVE-2026-110679 Details
Description
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolve this issue. It is advisable to upgrade the affected component.
A vulnerability allowing for an out-of-bounds read has been identified in OpenSIPS versions prior to 3.6.9 and 4.0.2. The issue arises in the RTPProxy component, specifically within the rtpproxy_offer and rtpproxy_answer functions. This vulnerability can be exploited remotely by sending SIP requests that trigger the faulty DTMF tag construction, using an attacker-controlled Call-ID to manipulate the buffer handling.
Users are advised to upgrade to OpenSIPS versions 3.6.9 or 4.0.2. If an immediate upgrade is not possible, avoid using the DTMF-catch 'd' or 'D' flag with 'rtpproxy_offer()' or 'rtpproxy_answer()' in the affected versions.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 14, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/OpenSIPS/opensips/ | [email protected] | Vendor |
| https://github.com/OpenSIPS/opensips/releases/tag/4.0.2 | [email protected] | Release NotesVendor |
| https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qv9x-v8jq-434w | [email protected] | AdvisoryRemedyVendor |
| https://vuldb.com/cve/CVE-2026-110679 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1003897 | [email protected] | Permission Required |
| https://vuldb.com/vuln/419834 | [email protected] | Permission Required |
| https://vuldb.com/vuln/419834/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| OpenSIPS | >= 4.0.0, < 4.0.2 (semver) >= 3.6.0, < 3.6.9 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 14, 2026 | New CVE Received | [email protected] |