Vulnerabilities

TI-2026-58395 CVE-2026-84975

Improper certificate validation in pjsip pjproject

LOW 34

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00232 Published 2026-09-18 No fix listed CWE-295

TI-2026-53990 CVE-2026-77396

PJSIP: Heap buffer overflow in the AVI parser

LOW 32

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00175 Published 2026-09-18 No fix listed CWE-122

TI-2026-41135 CVE-2026-57166

PJSIP: Pre-authentication overflow in the telnet CLI error

LOW 35

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00533 Published 2026-09-04 Fixed in 4472a31d77a7506ff175dad5abef490f4e31bed1 CWE-121

TI-2026-41134 CVE-2026-57165

PJSIP: Pre-authentication overflow in the telnet CLI history

LOW 28

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00452 Published 2026-09-04 Fixed in 628b71638465bacf66e767959e6acbab822eccd6 CWE-121

TI-2026-41133 CVE-2026-57164

PJSIP: Heap overflow in the HTTP client

MEDIUM 42

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00451 Published 2026-09-04 Fixed in 8d5956afab2ede95ddb199078dc19a8ac0114f3d CWE-122

TI-2026-41132 CVE-2026-57163

PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00402 Published 2026-09-04 No fix listed CWE-121

TI-2026-41131 CVE-2026-57162

PJSIP: Stack overflow parsing SDP a=crypto attributes

MEDIUM 47

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00638 Published 2026-09-04 No fix listed CWE-121

TI-2026-41130 CVE-2026-57161

PJSIP: Stack overflow handling Service-Route headers in a registration response

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0046 Published 2026-09-04 No fix listed CWE-121

TI-2026-41129 CVE-2026-57160

PJSIP: SIP message header buffer overflow

LOW 37

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-09-04 No fix listed CWE-193

TI-2026-41128 CVE-2026-57159

PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance

MEDIUM 45

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00596 Published 2026-09-04 Fixed in 673b978aab1fe3ab874247be32c871acc880cbeb CWE-129

TI-2026-30546 CVE-2026-42225

GnuTLS backend silently skips certificate chain verification when verify_peer is false

MEDIUM 41

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00161 Published 2026-05-07 Fixed in 2.17 CWE-295

TI-2026-30016 CVE-2026-41416

PJSIP: Asymmetric ptime integer overflow in Media Stream

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00279 Published 2026-04-24 Fixed in 2.17 CWE-190

TI-2026-30015 CVE-2026-41415

PJSIP: SIP Multipart CID URI Length Underflow

LOW 35

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.7 Network No auth No interaction EPSS 0.00308 Published 2026-04-24 Fixed in 2.17 CWE-125

TI-2026-29548 CVE-2026-40892

PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-04-21 No fix listed CWE-121

TI-2026-29349 CVE-2026-40614

PJSIP: Heap buffer overflow in Opus codec decoding

LOW 38

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00224 Published 2026-04-21 No fix listed CWE-122

TI-2026-26530 CVE-2026-34235

PJSIP: Heap OOB read in VPX unpacketizer

LOW 37

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-03-31 Fixed in 2.17 CWE-125

TI-2026-25511 CVE-2026-33069

PJSIP has an Out-of-bounds Read in SIP multipart parsing

LOW 30

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00271 Published 2026-03-20 Fixed in 2.17 CWE-125

TI-2026-25393 CVE-2026-32945

PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

LOW 38

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00327 Published 2026-03-20 Fixed in 2.17 CWE-122

TI-2026-25390 CVE-2026-32942

PJSIP has ICE session use-after-free race conditions

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.0 Network No auth No interaction EPSS 0.00339 Published 2026-03-20 Fixed in 2.17 CWE-416

TI-2026-22993 CVE-2026-28799

PJSIP: Heap use-after-free in PJSIP presence subscription termination handler

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00327 Published 2026-03-06 Fixed in 2.17 CWE-416

TI-2026-23213 CVE-2026-29068

PJSIP: Stack buffer overflow in Opus codec parser

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00361 Published 2026-03-06 Fixed in 2.17 CWE-121

TI-2026-21451 CVE-2026-26967

PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-122

TI-2026-21194 CVE-2026-26203

PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL

LOW 22

PJSIP is a free and open source multimedia communication library.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00118 Published 2026-02-19 Fixed in 2.17 CWE-416

TI-2026-21009 CVE-2026-25994

PJSIP has a heap buffer overflow in ICE with long username

MEDIUM 47

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.02045 Published 2026-02-11 No fix listed CWE-120

TI-2025-40254 CVE-2025-65102

PJSIP is vulnerable to buffer overflow in Opus PLC

LOW 38

PJSIP is a free and open source multimedia communication library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00338 Published 2025-11-21 Fixed in 2.16 CWE-120

Vulnerabilities

Filters