OSV-2024-1206
Heap-buffer-overflow in extract_sendrecv_mode
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515090
Crash type: Heap-buffer-overflow READ 6
Crash state:
extract_sendrecv_mode
parse_sdp_session
parse_mixed_content
What each source reports
OSV No score
Heap-buffer-overflow in extract_sendrecv_mode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372515090
Crash type: Heap-buffer-overflow READ 6
Crash state:
extract_sendrecv_mode
parse_sdp_session
parse_mixed_content
- Record
OSV-2024-1206- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kamailioOSS-Fuzz |
Listed versions, plus commit ranges 5.6.05.6.15.6.25.6.35.6.4 Show 13 moreShow less5.6.55.6.65.7.05.7.15.7.25.7.35.7.45.7.55.7.65.8.05.8.15.8.25.8.3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-1206 is a vulnerability with no CVSS score yet in kamailio, published October 11, 2024. No source lists public exploit code. A source reports a fix.