{"affected":[{"product":"sipsorcery","source":"CNA: GitHub_M","vendor":"sipsorcery-org","versions":[{"status":"affected","version":"< 10.0.14"}]},{"ecosystem":"nuget","packageName":"SIPSorcery","product":"SIPSorcery","source":"GitHub GHSA-jwjp-4649-v8jp","vendor":"","versions":[{"status":"affected","version":"<= 10.0.13","versionType":"GitHub advisory range"}]},{"defaultStatus":"unaffected","ecosystem":"NuGet","packageName":"SIPSorcery","product":"SIPSorcery","source":"OSV GHSA-jwjp-4649-v8jp","vendor":"","versions":[{"status":"affected","version":"1.3.0-PRE","versionType":"NuGet"},{"status":"affected","version":"1.3.1","versionType":"NuGet"},{"status":"affected","version":"1.4.0","versionType":"NuGet"},{"status":"affected","version":"1.4.1","versionType":"NuGet"},{"status":"affected","version":"1.5.0","versionType":"NuGet"},{"status":"affected","version":"1.5.2","versionType":"NuGet"},{"status":"affected","version":"1.5.3","versionType":"NuGet"},{"status":"affected","version":"1.5.5","versionType":"NuGet"},{"status":"affected","version":"1.5.6","versionType":"NuGet"},{"status":"affected","version":"1.6.0","versionType":"NuGet"},{"status":"affected","version":"1.6.1","versionType":"NuGet"},{"status":"affected","version":"1.6.2","versionType":"NuGet"},{"status":"affected","version":"10.0.1","versionType":"NuGet"},{"status":"affected","version":"10.0.10","versionType":"NuGet"},{"status":"affected","version":"10.0.11","versionType":"NuGet"},{"status":"affected","version":"10.0.12","versionType":"NuGet"},{"status":"affected","version":"10.0.13","versionType":"NuGet"},{"status":"affected","version":"10.0.2","versionType":"NuGet"},{"status":"affected","version":"10.0.3","versionType":"NuGet"},{"status":"affected","version":"10.0.4-pre","versionType":"NuGet"},{"status":"affected","version":"10.0.5","versionType":"NuGet"},{"status":"affected","version":"10.0.6","versionType":"NuGet"},{"status":"affected","version":"10.0.7","versionType":"NuGet"},{"status":"affected","version":"10.0.8","versionType":"NuGet"},{"status":"affected","version":"10.0.9","versionType":"NuGet"},{"status":"affected","version":"2.0.0","versionType":"NuGet"},{"status":"affected","version":"2.0.1","versionType":"NuGet"},{"status":"affected","version":"3.0.0","versionType":"NuGet"},{"status":"affected","version":"3.0.1","versionType":"NuGet"},{"status":"affected","version":"3.0.2","versionType":"NuGet"},{"status":"affected","version":"3.0.3","versionType":"NuGet"},{"status":"affected","version":"3.0.4","versionType":"NuGet"},{"status":"affected","version":"3.1.0","versionType":"NuGet"},{"status":"affected","version":"3.2.0","versionType":"NuGet"},{"status":"affected","version":"3.3.0","versionType":"NuGet"},{"status":"affected","version":"3.4.0","versionType":"NuGet"},{"status":"affected","version":"3.5.0","versionType":"NuGet"},{"status":"affected","version":"3.6.0","versionType":"NuGet"},{"status":"affected","version":"4.0.0-rc","versionType":"NuGet"},{"status":"affected","version":"4.0.1-rc","versionType":"NuGet"},{"status":"affected","version":"4.0.13-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.2-rc","versionType":"NuGet"},{"status":"affected","version":"4.0.28-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.29-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.3-rc","versionType":"NuGet"},{"status":"affected","version":"4.0.30-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.31-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.32-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.33-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.34-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.35-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.4-rc","versionType":"NuGet"},{"status":"affected","version":"4.0.40-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.41-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.42-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.43-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.44-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.45-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.46-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.47-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.49-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.50-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.51-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.55-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.58-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.59-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.60-pre","versionType":"NuGet"},{"status":"affected","version":"4.0.7-rc","versionType":"NuGet"},{"status":"affected","version":"4.0.8-rc","versionType":"NuGet"},{"status":"affected","version":"5.1.0","versionType":"NuGet"},{"status":"affected","version":"5.1.1","versionType":"NuGet"},{"status":"affected","version":"5.1.2","versionType":"NuGet"},{"status":"affected","version":"5.1.4-pre","versionType":"NuGet"},{"status":"affected","version":"5.1.5-pre","versionType":"NuGet"},{"status":"affected","version":"5.1.6-pre","versionType":"NuGet"},{"status":"affected","version":"5.1.7-pre","versionType":"NuGet"},{"status":"affected","version":"5.1.8-pre","versionType":"NuGet"},{"status":"affected","version":"5.2.0","versionType":"NuGet"},{"status":"affected","version":"5.2.3","versionType":"NuGet"},{"status":"affected","version":"5.3.0-pre","versionType":"NuGet"},{"status":"affected","version":"5.3.3-pre","versionType":"NuGet"},{"status":"affected","version":"6.0.1-pre","versionType":"NuGet"},{"status":"affected","version":"6.0.11","versionType":"NuGet"},{"status":"affected","version":"6.0.12","versionType":"NuGet"},{"status":"affected","version":"6.0.2","versionType":"NuGet"},{"status":"affected","version":"6.0.3","versionType":"NuGet"},{"status":"affected","version":"6.0.4","versionType":"NuGet"},{"status":"affected","version":"6.0.6","versionType":"NuGet"},{"status":"affected","version":"6.0.7","versionType":"NuGet"},{"status":"affected","version":"6.0.8","versionType":"NuGet"},{"status":"affected","version":"6.0.9","versionType":"NuGet"},{"status":"affected","version":"6.1.0-pre","versionType":"NuGet"},{"status":"affected","version":"6.1.1-pre","versionType":"NuGet"},{"status":"affected","version":"6.2.0","versionType":"NuGet"},{"status":"affected","version":"6.2.1","versionType":"NuGet"},{"status":"affected","version":"6.2.3","versionType":"NuGet"},{"status":"affected","version":"6.2.4","versionType":"NuGet"},{"status":"affected","version":"8.0.0","versionType":"NuGet"},{"status":"affected","version":"8.0.1","versionType":"NuGet"},{"status":"affected","version":"8.0.10","versionType":"NuGet"},{"status":"affected","version":"8.0.11","versionType":"NuGet"},{"status":"affected","version":"8.0.12","versionType":"NuGet"},{"status":"affected","version":"8.0.13","versionType":"NuGet"},{"status":"affected","version":"8.0.14","versionType":"NuGet"},{"status":"affected","version":"8.0.15-pre","versionType":"NuGet"},{"status":"affected","version":"8.0.20-pre","versionType":"NuGet"},{"status":"affected","version":"8.0.21-pre","versionType":"NuGet"},{"status":"affected","version":"8.0.22","versionType":"NuGet"},{"status":"affected","version":"8.0.23","versionType":"NuGet"},{"status":"affected","version":"8.0.3","versionType":"NuGet"},{"status":"affected","version":"8.0.4","versionType":"NuGet"},{"status":"affected","version":"8.0.5","versionType":"NuGet"},{"status":"affected","version":"8.0.6","versionType":"NuGet"},{"status":"affected","version":"8.0.7","versionType":"NuGet"},{"status":"affected","version":"8.0.9","versionType":"NuGet"},{"events":[{"introduced":"0"},{"fixed":"10.0.14"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cveId":"CVE-2026-123805","cwes":["CWE-125","CWE-755"],"description":"SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.14, SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields from an attacker-controlled SCTP SACK chunk without checking that the corresponding entries fit the declared chunk length. A negotiated WebRTC peer can send a checksum-valid malformed SACK chunk that drives the parser beyond the 262144-byte receive buffer. The resulting IndexOutOfRangeException bypasses the recoverable ApplicationException handler in RTCSctpTransport.DoReceive, causing the generic handler to exit the dedicated receive loop and permanently terminate the SCTP association and all data channels. This issue is fixed in 10.0.14.","epss":{"date":"2026-11-12","percentile":0.316,"score":0.00372},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":7.5,"severity":"high","source":"NVD: security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794506710593,"publishedAt":1794254255105,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/sipsorcery-org/sipsorcery/security/advisories/GHSA-jwjp-4649-v8jp"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/sipsorcery-org/sipsorcery/pull/1772"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/sipsorcery-org/sipsorcery/commit/a2466550bb2a28821c73fb1961bc33dcc467f8cf"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/sipsorcery-org/sipsorcery/commit/a2466550bb2a28821c73fb1961bc33dcc467f8cf"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/sipsorcery-org/sipsorcery/pull/1772"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/sipsorcery-org/sipsorcery/security/advisories/GHSA-jwjp-4649-v8jp"},{"source":"GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/sipsorcery-org/sipsorcery/security/advisories/GHSA-jwjp-4649-v8jp"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-jwjp-4649-v8jp"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-jwjp-4649-v8jp"}],"remediation":[{"kind":"fix","source":"GitHub GHSA-jwjp-4649-v8jp","text":"SIPSorcery (nuget): GitHub reports patched versions 10.0.14. Check the advisory for the affected release branch.","url":"https://github.com/sipsorcery-org/sipsorcery/security/advisories/GHSA-jwjp-4649-v8jp"},{"kind":"fix","source":"OSV GHSA-jwjp-4649-v8jp","text":"SIPSorcery (NuGet): OSV reports a fixed version 10.0.14. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-jwjp-4649-v8jp"}],"revision":"2673a7deceaa15c565c8449fe7e37e547bfd28f65e02b71b73ec317ac46f3314","sources":[{"modifiedAt":1794506710593,"name":"CNA: GitHub_M","retrievedAt":1794510549615,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123805"},{"modifiedAt":1794255490303,"name":"NVD","retrievedAt":1794269988423,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123805"},{"modifiedAt":1794254197000,"name":"GitHub Security Advisories","retrievedAt":1794450609645,"url":"https://github.com/sipsorcery-org/sipsorcery/security/advisories/GHSA-jwjp-4649-v8jp"},{"modifiedAt":1794255304838,"name":"OSV / GitHub Security Advisories","retrievedAt":1794510550066,"url":"https://osv.dev/vulnerability/GHSA-jwjp-4649-v8jp"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794510556046,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-123805"}],"ssvc":{"assessedAt":1794501446973,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"SIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS)","updatedAt":1794510556046}