Read the docs

pjsip

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

pjsip records in CISA KEV

No pjsip vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pjsip 14 records MEDIUM Pjsua2 Sdk 1 record MEDIUM

Records

49 records

TI-2022-08599 CVE-2022-24786

Potential out-of-bound read/write in PJSIP

Priority MEDIUM 53

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0205 Published 2022-04-06 No fix listed CWE-125
TI-2022-06096 CVE-2022-21723

Out-of-bounds read in multipart parsing in PJSIP

Priority MEDIUM 52

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04357 Published 2022-01-27 No fix listed CWE-125
TI-2022-07661 CVE-2022-23608

Use after free in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04022 Published 2022-02-22 No fix listed CWE-416
TI-2022-06095 CVE-2022-21722

Potential out-of-bound read during RTP/RTCP parsing in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02339 Published 2022-01-27 No fix listed CWE-125
TI-2021-15581 CVE-2021-37706

Potential integer underflow upon receiving STUN message in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04924 Published 2021-12-22 No fix listed CWE-191
TI-2022-08568 CVE-2022-24754

Buffer overflow in pjsip

Priority MEDIUM 47

PJSIP is a free and open source multimedia communication library written in C language.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0208 Published 2022-03-11 No fix listed CWE-120
TI-2022-18621 CVE-2022-39244

Buffer overflow in pjlib scanner and pjmedia

Priority MEDIUM 46

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.015 Published 2022-10-06 Fixed in 2.13 CWE-120
TI-2021-19651 CVE-2021-43845

Prevent out-of-bounds read in PJSIP

Priority MEDIUM 46

PJSIP is a free and open source multimedia communication library.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03893 Published 2021-12-27 No fix listed CWE-125
TI-2015-01801 CVE-2015-2003 · GHSA-62fc-cqfm-75xm

The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to…

Priority MEDIUM 46

The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01983 Published 2018-03-29 No fix listed CWE-118
TI-2022-07601 CVE-2022-23547

Heap buffer overflow in pjproject when decoding STUN message

Priority MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01026 Published 2022-12-23 No fix listed CWE-122
TI-2022-07592 CVE-2022-23537

PJSIP vulnerable to heap buffer overflow when decoding STUN message

Priority MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01114 Published 2022-12-20 No fix listed CWE-122
Load more
Open these records in search →