Is This vulnerability exploited in the wild?

No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

How severe is This vulnerability?

High severity, with a CVSS score of 7.5, published 12 August 2026.

Is there a fix for This vulnerability?

A patch was published on 2026-08-12: Fixed in version 10.0.14 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is This vulnerability attacked?

It is attacked over the network, in a software library.

Check whether you run SIPSorcery (NuGet) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

SIPSorcery out-of-bounds read in SCTP SACK chunk parsing

Severity: high · CVSS 7.5 · Published 2026-08-12

SIPSorcery, a library used for real-time communications like VoIP and WebRTC, is vulnerable to a denial-of-service attack. An attacker can send a specially crafted network packet that causes the software to crash its communication thread. This results in the permanent loss of all active data channels and prevents new communications until the service is restarted.

Technologies: SIPSorcery (NuGet). Vendors: NuGet.

Quick answers

Is This vulnerability exploited in the wild?: No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.
How severe is This vulnerability?: High severity, with a CVSS score of 7.5, published 12 August 2026.
Which products and versions are affected?: SIPSorcery (NuGet) <= 10.0.13.
Is there a fix for This vulnerability?: A patch was published on 2026-08-12: Fixed in version 10.0.14 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is This vulnerability attacked?: It is attacked over the network, in a software library.
Am I affected?: Check whether you run SIPSorcery (NuGet) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds read (CWE-125) exists in SctpSackChunk.ParseChunk within the SIPSorcery library. The component reads 'numGapAckBlocks' and 'numDuplicateTSNs' from an attacker-controlled SCTP SACK chunk and uses these values to loop through a buffer without validating them against the actual chunk length or receive buffer size. When a crafted packet exceeds the 262,144-byte buffer, an IndexOutOfRangeException is thrown. Because this exception is not caught by the specific recoverable exception handler in RTCSctpTransport.DoReceive, it terminates the dedicated SCTP receive thread, leading to a permanent Denial of Service for the SCTP association. This is fixed in version 10.0.14.

Affected products

SIPSorcery SIPSorcery <= 10.0.13

Timeline

2026-08-12: advisory
2026-08-12: patched: Fixed in version 10.0.14

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.