Pjsip

Pjsip

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-33069

  • EPSS 0.04%
  • Veröffentlicht 20.03.2026 08:21:51
  • Zuletzt bearbeitet 23.03.2026 15:32:13

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_parse(). After boundary string matching, curptr is advanced past the delimiter without ...

9.8

CVE-2026-32945

  • EPSS 0.04%
  • Veröffentlicht 20.03.2026 03:54:00
  • Zuletzt bearbeitet 23.03.2026 20:54:34

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolve...

8.1

CVE-2026-32942

  • EPSS 0.04%
  • Veröffentlicht 20.03.2026 03:43:37
  • Zuletzt bearbeitet 23.03.2026 20:51:20

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the call...

7.5

CVE-2026-28799

  • EPSS 0.06%
  • Veröffentlicht 06.03.2026 06:36:55
  • Zuletzt bearbeitet 10.03.2026 19:44:11

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework (evsub.c) that is triggered during presence unsubscription (SUBSC...

7.5

CVE-2026-29068

  • EPSS 0.06%
  • Veröffentlicht 06.03.2026 06:36:45
  • Zuletzt bearbeitet 10.03.2026 19:11:53

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold...

5.3

CVE-2026-26967

  • EPSS 0.01%
  • Veröffentlicht 20.02.2026 00:26:54
  • Zuletzt bearbeitet 20.02.2026 19:30:22

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packe...

6.5

CVE-2026-26203

  • EPSS 0.02%
  • Veröffentlicht 19.02.2026 19:28:58
  • Zuletzt bearbeitet 20.02.2026 20:12:31

PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start...

9.8

CVE-2026-25994

  • EPSS 0.07%
  • Veröffentlicht 11.02.2026 21:16:20
  • Zuletzt bearbeitet 19.02.2026 19:23:29

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames.

9.8

CVE-2022-23547

  • EPSS 0.39%
  • Veröffentlicht 23.12.2022 15:15:14
  • Zuletzt bearbeitet 04.11.2025 16:15:46

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsi...

9.1

CVE-2022-39269

  • EPSS 0.21%
  • Veröffentlicht 06.10.2022 18:16:13
  • Zuletzt bearbeitet 21.11.2024 07:17:55

PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media to be sent insecurely...