Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY message, process_contact() copies an attacker-controlled port value from the alias parameter into a fixed 5-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger stack corruption and terminate the P-CSCF process, resulting in denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🆕 New CVE Kamailio: stack overflow leads to DoS in ims_registrar_pcscf module (CVE-2026-106803) An unauthenticated remote attacker can crash the P-CSCF process by sending a crafted SIP registration notification. No patch listed yet https://cve.now/CVE-2026-106803?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical