Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

Advisories

Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

Severity: medium
Date: 11/4/2026
Affecting: sngrep <= 1.9.0
CVE: CVE-2026-121943
CWE: CWE-170 Improper Null Termination
CVSS: 6.3
CVSS V4 Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
References: https://github.com/irontec/sngrep/issues/589
https://hackmd.io/@haindpwn/sngrep-sip-payload-missing-nul-oob-read
https://github.com/irontec/sngrep/blob/v1.9.0/src/sip.c#L396-L410
Credit: HaiND from the Post and Telecommunication Institute of Technology
Description: Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and sip_validate_packet caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent stack bytes into displayed SIP fields.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.

Vulnerability Prioritization
Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
Early Warning System
Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

Schedule a Demo