Pjsip vulnerabilities
48 CVEs and advisories name Pjsip as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84975PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
- CVE-2026-77396PJSIP: Heap buffer overflow in the AVI parser
- CVE-2026-57166PJSIP: Pre-authentication overflow in the telnet CLI error
- CVE-2026-57165PJSIP: Pre-authentication overflow in the telnet CLI history
- CVE-2026-57164PJSIP: Heap overflow in the HTTP client
- CVE-2026-57163PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend
- CVE-2026-57162PJSIP: Stack overflow parsing SDP a=crypto attributes
- CVE-2026-57161PJSIP: Stack overflow handling Service-Route headers in a registration response
- CVE-2026-57160PJSIP: SIP message header buffer overflow
- CVE-2026-57159PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance
- CVE-2026-42225GnuTLS backend silently skips certificate chain verification when verify_peer is false
- CVE-2026-41416PJSIP: Asymmetric ptime integer overflow in Media Stream
- CVE-2026-41415PJSIP: SIP Multipart CID URI Length Underflow
- CVE-2026-40892PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()
- CVE-2026-40614PJSIP: Heap buffer overflow in Opus codec decoding
- CVE-2026-34235PJSIP: Heap OOB read in VPX unpacketizer
- CVE-2026-33069PJSIP has an Out-of-bounds Read in SIP multipart parsing
- CVE-2026-32945PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser
- CVE-2026-32942PJSIP has ICE session use-after-free race conditions
- CVE-2026-28799PJSIP: Heap use-after-free in PJSIP presence subscription termination handler
- CVE-2026-29068PJSIP: Stack buffer overflow in Opus codec parser
- CVE-2026-26967PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer
- CVE-2026-26203PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL
- CVE-2026-25994PJSIP has a heap buffer overflow in ICE with long username
- CVE-2025-65102PJSIP is vulnerable to buffer overflow in Opus PLC
- CVE-2023-38703PJSIP has use-after-free vulnerability in SRTP media transport
- CVE-2023-27585PJSIP is a free and open source multimedia communication library written in C.
- CVE-2022-23547Heap buffer overflow in pjproject when decoding STUN message
- CVE-2022-23537PJSIP vulnerable to heap buffer overflow when decoding STUN message
- CVE-2022-39269Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip