IMS Out-of-Bounds Read Denial of Service Flaw

CVE-2026-4967 is a remote denial-of-service vulnerability affecting IMS (IP Multimedia Subsystem) implementations that stems from insufficient bounds checking during memory read operations. An attacker can craft malicious input that triggers an out-of-bounds read, causing the affected system to crash or become unresponsive without requiring authentication or elevated privileges. This poses significant risk to telecommunications providers and enterprises relying on IMS for VoIP, video calling, and unified communications—any disruption directly impacts business continuity and user availability.

While this CVE currently lacks mapped MITRE ATT&CK techniques and CWE classification, Casky.ai's 754 security skills—powered by Claude's extended reasoning—would identify attack patterns associated with memory safety violations and resource exhaustion. Practitioners using Casky would recognize detection signals aligned with T1499 (Service Exhaustion Denial of Service) and T1561 (Disk Content Wipe) categories, observing anomalous process behavior, unexpected memory access patterns, and sudden service terminations in IMS logs. The platform's skill mapping would help teams correlate fuzzing indicators and malformed protocol messages with known denial-of-service attack chains, enabling faster incident response and prioritization of IMS patching efforts.