Teluu

Pjsip

32 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2026-42225

  • EPSS 0.02%
  • Veröffentlicht 07.05.2026 18:47:26
  • Zuletzt bearbeitet 12.05.2026 15:53:39

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connections with invalid or untrusted certificates even when the application ...

7.5

CVE-2026-41416

  • EPSS 0.06%
  • Veröffentlicht 24.04.2026 18:40:08
  • Zuletzt bearbeitet 28.04.2026 18:30:20

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an integer overflow in media stream buffer size calculation when processing SDP with asymmetric ptime configuration. The overflow may result ...

9.1

CVE-2026-41415

  • EPSS 0.06%
  • Veröffentlicht 24.04.2026 18:38:36
  • Zuletzt bearbeitet 28.04.2026 18:30:54

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Content-ID URI in SIP multipart message body. Insufficient length validation can cause reads b...

9.1

CVE-2026-34235

  • EPSS 0.06%
  • Veröffentlicht 31.03.2026 15:36:47
  • Zuletzt bearbeitet 03.04.2026 14:23:41

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP unpacketizer that occurs when parsing crafted VP9 Scalability Structure (SS) data....

9.8

CVE-2023-38703

  • EPSS 0.28%
  • Veröffentlicht 06.10.2023 14:15:12
  • Zuletzt bearbeitet 10.04.2025 20:31:40

PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and IC...

7.5

CVE-2023-27585

  • EPSS 0.5%
  • Veröffentlicht 14.03.2023 17:15:19
  • Zuletzt bearbeitet 04.11.2025 17:15:35

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS res...

9.8

CVE-2022-23537

  • EPSS 0.37%
  • Veröffentlicht 20.12.2022 19:15:24
  • Zuletzt bearbeitet 04.11.2025 16:15:46

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with un...

9.1

CVE-2022-39269

  • EPSS 0.22%
  • Veröffentlicht 06.10.2022 18:16:13
  • Zuletzt bearbeitet 06.05.2026 13:28:44

PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media to be sent insecurely...

9.8

CVE-2022-31031

  • EPSS 0.72%
  • Veröffentlicht 09.06.2022 16:15:08
  • Zuletzt bearbeitet 04.11.2025 16:15:49

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability a...

7.5

CVE-2022-24792

  • EPSS 1.62%
  • Veröffentlicht 25.04.2022 16:16:09
  • Zuletzt bearbeitet 21.11.2024 06:51:06

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs ...