AIKIDO-2026-445337

TL;DR

Affected versions of this package are vulnerable to Denial of Service (DoS) due to an infinite loop in the SCTP chunk parser. In SctpPacket.ParseChunks, the parser advances its buffer cursor by the declared chunk length. A recognised SCTP chunk with a declared length of zero leaves the cursor stationary, so the loop never terminates and pins the receive thread at 100% CPU. A remote peer that can deliver a checksum-valid SCTP-over-UDP (SctpUdpTransport) or SCTP-over-DTLS/WebRTC (RTCSctpTransport) packet can trigger this condition and deny service for that SCTP session. The fix enforces the SCTP minimum chunk length and buffer bounds before advancing the cursor, rejecting malformed chunks with an ApplicationException.