CVE-2021-43610: Linphone Belle-SIP

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header (request URI without a parameter) in an unauthenticated SIP message, a different issue than CVE-2021-33056.

Affected products

• Linphone Belle-SIP: before 5.0.20 (fixed in 5.0.20)

Published 2021-11-12. Last modified 2026-06-17.