---
id: "CVE-2026-59623"
page: "https://infrastack.ai/live/CVE-2026-59623"
kind: "vulnerability"
aliases: ["CVE-2026-59623"]
title: "SIP stack: bad bounds check lets a remote message crash the process"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "sip", "voip"]
not_affected_if: []
published_at: "2026-11-10T20:19:32+00:00"
first_seen_at: "2026-11-10T20:46:15+00:00"
updated_at: "2026-11-10T20:49:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59623", "first_seen_at": "2026-11-10T20:46:15+00:00"}]
exploit_sources: []
---

# SIP stack: bad bounds check lets a remote message crash the process

Link for people: https://infrastack.ai/live/CVE-2026-59623 (this .md is for agents)

The CompareTelUris function in SipAddress.cpp performs an incorrect bounds check, which can trigger an unhandled out-of-range exception. An attacker who can send crafted SIP traffic can crash the process, causing denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-59623

## From the sources

In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_