CVE-2026-93962

HIGH 8.3

Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

CVSS Score

8.3

EPSS Score

0.0%

EPSS Percentile

0th

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 6.0.8 is sufficient to resolve this issue. This patch is called 38711a3e788de0130d48cb485578c482b57d9351/4f62235b6f477b649c5cc18b0c81b4e26c949b98/4f62235b6f477b649c5cc18b0c81b4e26c949b98. You should upgrade the affected component.

CWE	CWE-122 CWE-119
Vendor	n/a
Product	kamailio
Published	Sep 20, 2026

Stay Ahead of the Next One

Get instant alerts for n/a kamailio

Be the first to know when new high vulnerabilities affecting n/a kamailio are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / Kamailio

5.8.0 5.8.1 5.8.2 5.8.3 5.8.4 5.8.5 5.8.6 5.8.7 5.8.8 6.0.0 6.0.1 6.0.2 6.0.3 6.0.4 6.0.5 6.0.6 6.0.7 6.1.0 6.1.1 6.1.2 6.1.3 6.1.4 6.2.0-dev1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/407921 vuldb.com: https://vuldb.com/vuln/407921/cti vuldb.com: https://vuldb.com/cve/CVE-2026-93962 vuldb.com: https://vuldb.com/submit/944244 github.com: https://github.com/kamailio/kamailio/issues/4876 github.com: https://github.com/kamailio/kamailio/pull/4877 github.com: https://github.com/kamailio/kamailio/commit/38711a3e788de0130d48cb485578c482b57d9351 github.com: https://github.com/kamailio/kamailio/releases/tag/6.0.8 github.com: https://github.com/kamailio/kamailio/

Credits

🔍 WeiYi (VulDB User)