Pjsip Pjproject vulnerabilities

• teluu pjsip, pjsip pjproject +1 more PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) CVE-2026-84975 7.4 HighSeptember 18, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Heap buffer overflow in the AVI parser CVE-2026-77396 Public exploit 6.9 MediumSeptember 18, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Pre-authentication overflow in the telnet CLI error CVE-2026-57166 6.3 MediumSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Pre-authentication overflow in the telnet CLI history CVE-2026-57165 6.3 MediumSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Heap overflow in the HTTP client CVE-2026-57164 8.3 HighSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend CVE-2026-57163 8.8 HighSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Stack overflow parsing SDP a=crypto attributes CVE-2026-57162 8.8 HighSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Stack overflow handling Service-Route headers in a registration response CVE-2026-57161 8.8 HighSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: SIP message header buffer overflow CVE-2026-57160 6.9 MediumSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance CVE-2026-57159 8.4 HighSeptember 4, 2026
• teluu pjsip, pjsip pjproject +1 more GnuTLS backend silently skips certificate chain verification when verify_peer is false CVE-2026-42225 Fix available 8.2 HighMay 7, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Asymmetric ptime integer overflow in Media Stream CVE-2026-41416 Fix available 8.1 HighApril 24, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: SIP Multipart CID URI Length Underflow CVE-2026-41415 Fix available 6.7 MediumApril 24, 2026
• pjsip, pjsip pjproject +1 more PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() CVE-2026-40892 Fix available 8.1 HighApril 21, 2026
• pjsip, pjsip pjproject +1 more PJSIP: Heap buffer overflow in Opus codec decoding CVE-2026-40614 Fix available 8.5 HighApril 21, 2026
• teluu pjsip, pjsip pjproject +1 more PJSIP: Heap OOB read in VPX unpacketizer CVE-2026-34235 Fix available 6.9 MediumMarch 31, 2026
• pjsip, pjsip pjproject +1 more PJSIP has an Out-of-bounds Read in SIP multipart parsing CVE-2026-33069 Fix available 6.9 MediumMarch 20, 2026
• pjsip, pjsip pjproject +1 more PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser CVE-2026-32945 Public exploitFix available 8.4 HighMarch 20, 2026
• pjsip, pjsip pjproject +1 more PJSIP has ICE session use-after-free race conditions CVE-2026-32942 Fix available 8.0 HighMarch 20, 2026
• pjsip, pjsip pjproject +1 more PJSIP: Heap use-after-free in PJSIP presence subscription termination handler CVE-2026-28799 Fix available 8.7 HighMarch 6, 2026
• pjsip, pjsip pjproject +1 more PJSIP: Stack buffer overflow in Opus codec parser CVE-2026-29068 Fix available 8.7 HighMarch 6, 2026
• pjsip pjproject, pjsip +1 more PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer CVE-2026-26967 Fix available 8.1 HighFebruary 20, 2026
• pjsip, pjsip pjproject +1 more PJSIP has a heap buffer overflow in ICE with long username CVE-2026-25994 Public exploitFix available 8.1 HighFebruary 11, 2026
• pjsip pjproject PJSIP is vulnerable to buffer overflow in Opus PLC CVE-2025-65102 Fix available 8.7 HighNovember 21, 2025
• teluu pjsip, pjsip pjproject +1 more PJSIP has use-after-free vulnerability in SRTP media transport CVE-2023-38703 Fix available 9.8 CriticalOctober 6, 2023
• teluu pjsip, pjsip pjproject +1 more asterisk - security update CVE-2023-27585 Fix available 7.5 HighMarch 14, 2023
• pjsip pjproject, pjsip +1 more Heap buffer overflow in pjproject when decoding STUN message CVE-2022-23547 Fix available 6.5 MediumDecember 23, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more PJSIP vulnerable to heap buffer overflow when decoding STUN message CVE-2022-23537 Fix available 6.5 MediumDecember 20, 2022
• teluu pjsip, pjsip pjproject +1 more Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip CVE-2022-39269 Fix available 9.1 CriticalOctober 6, 2022
• pjsip, pjsip pjproject +1 more Buffer overflow in pjlib scanner and pjmedia CVE-2022-39244 Fix available 7.5 HighOctober 6, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Potential stack buffer overflow when parsing message as a STUN client CVE-2022-31031 Fix available 9.8 CriticalJune 7, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Potential infinite loop when parsing WAV format file in PJSIP CVE-2022-24792 Fix available 7.5 HighApril 25, 2022
• pjsip pjproject, pjsip, debian linux +2 more Potential heap buffer overflow when parsing DNS packets in PJSIP CVE-2022-24793 Fix available 7.5 HighApril 6, 2022
• pjsip pjproject, pjsip, debian linux +2 more Potential out-of-bound read/write in PJSIP CVE-2022-24786 Fix available 9.8 CriticalApril 6, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Infinite Loop in PJSIP CVE-2022-24763 Fix available 7.5 HighMarch 30, 2022
• pjsip pjproject, teluu pjsip, debian linux +2 more Stack buffer overflow in pjproject CVE-2022-24764 Fix available 7.5 HighMarch 22, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Buffer overflow in pjsip CVE-2022-24754 Fix available 8.5 HighMarch 11, 2022
• teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more Use after free in PJSIP CVE-2022-23608 Fix available 8.1 HighFebruary 22, 2022
• teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more Out-of-bounds read in multipart parsing in PJSIP CVE-2022-21723 Fix available 9.1 CriticalJanuary 27, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Potential out-of-bound read during RTP/RTCP parsing in PJSIP CVE-2022-21722 Fix available 9.1 CriticalJanuary 27, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Missing release of locks in PJSIP CVE-2021-41141 Fix available 5.9 MediumJanuary 4, 2022
• teluu pjsip, debian linux, pjsip pjproject +2 more Prevent out-of-bounds read in PJSIP CVE-2021-43845 Fix available 8.2 HighDecember 27, 2021
• teluu pjsip, debian linux, pjsip pjproject +2 more Out-of-bounds read when parsing RTCP BYE message in PJSIP CVE-2021-43804 Fix available 7.3 HighDecember 22, 2021
• teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more Potential integer underflow upon receiving STUN message in PJSIP CVE-2021-37706 Fix available 7.3 HighDecember 22, 2021
• teluu pjsip, debian linux, pjsip pjproject +2 more Denial of Service in PJSIP CVE-2021-32686 Fix available 5.9 MediumJuly 23, 2021
• teluu pjsip, debian linux, pjsip pjproject +2 more Crash in receiving updated SDP answer after initial SDP negotiation failed CVE-2021-21375 Fix available 6.5 MediumMarch 10, 2021
• teluu pjsip, pjsip pjproject +1 more Existing TLS connections can be reused without checking remote hostname CVE-2020-15260 Fix available 6.8 MediumMarch 10, 2021