CVE-2026-59595

HighCVSS 7.5/10Last modified Nov 11, 2026

Description

In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-595968.4In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an insecurCVE-2026-595978.4In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across configuratiCVE-2026-595987.8In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free. This could lead to local escalCVE-2026-59604.3A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sqlCVE-2026-596015.3In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code. This could lead to remCVE-2026-596037.5In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message retCVE-2026-596046.2In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead CVE-2026-596066.7In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a permissiCVE-2026-596077.8In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code. This cCVE-2026-596087.8In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalaCVE-2026-596098.4In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use afCVE-2026-59617.3A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the f
CVE-2026-59595: High severity, CVSS 7.5 | Vulnix