The vulnerability resides in the get_4bytes function of the AVP handler module within Kamailio versions up to 5.5.0 and 6.0.7. A crafted SIP message can cause the function to read memory beyond the intended buffer boundaries, potentially exposing sensitive data from the server process. The flaw does not directly grant code execution or privilege escalation, but it may leak application memory contents and other information useful to an attacker.

Vendors affected are Kamailio, specifically deployments running Kamailio 5.5.0 or earlier and 6.0.7 or earlier. The issue is contained in the module src/modules/ims_registrar_scscf/cxdx_avp.c and is present in all builds that include this component without the recommended patch.

The CVSS score of 5.3 indicates a moderate severity. The exploit is reported to be usable from a remote source, and the public disclosure suggests that it is already being leveraged. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog, which reduces but does not eliminate the urgency for remediation. The primary exploit vector is over an untrusted network where an attacker can send a malicious SIP request that triggers the out-of-bounds read.