Threats affecting pkg:github/sngrep

CVE-2026-90558 is a critical stack-based buffer overflow vulnerability in irontec sngrep versions up to and including 1.8.4. The flaw occurs in SIP attribute formatting routines when header values exceed a 255-byte buffer limit. Maliciously crafted SIP packets with oversized header fields like Call-ID or X-Call-ID can trigger this overflow, potentially causing crashes or arbitrary code execution during packet parsing and rendering.