Vulnerabilities

TI-2026-58395 CVE-2026-84975

Improper certificate validation in pjsip pjproject

LOW 34

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00232 Published 2026-09-18 No fix listed CWE-295

TI-2026-53990 CVE-2026-77396

PJSIP: Heap buffer overflow in the AVI parser

LOW 32

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00175 Published 2026-09-18 No fix listed CWE-122

TI-2026-41135 CVE-2026-57166

PJSIP: Pre-authentication overflow in the telnet CLI error

LOW 35

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00533 Published 2026-09-04 Fixed in 4472a31 CWE-121

TI-2026-41134 CVE-2026-57165

PJSIP: Pre-authentication overflow in the telnet CLI history

LOW 28

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00452 Published 2026-09-04 Fixed in 628b716 CWE-121

TI-2026-41133 CVE-2026-57164

PJSIP: Heap overflow in the HTTP client

MEDIUM 42

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00451 Published 2026-09-04 Fixed in 8d5956a CWE-122

TI-2026-41132 CVE-2026-57163

PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00402 Published 2026-09-04 No fix listed CWE-121

TI-2026-41131 CVE-2026-57162

PJSIP: Stack overflow parsing SDP a=crypto attributes

MEDIUM 47

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00638 Published 2026-09-04 No fix listed CWE-121

TI-2026-41130 CVE-2026-57161

PJSIP: Stack overflow handling Service-Route headers in a registration response

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0046 Published 2026-09-04 No fix listed CWE-121

TI-2026-41129 CVE-2026-57160

PJSIP: SIP message header buffer overflow

LOW 37

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-09-04 No fix listed CWE-193

TI-2026-41128 CVE-2026-57159

PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance

MEDIUM 45

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00596 Published 2026-09-04 Fixed in 673b978 CWE-129

TI-2026-30546 CVE-2026-42225

GnuTLS backend silently skips certificate chain verification when verify_peer is false

MEDIUM 41

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00161 Published 2026-05-07 Fixed in 2.17 CWE-295

TI-2026-30016 CVE-2026-41416

PJSIP: Asymmetric ptime integer overflow in Media Stream

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00279 Published 2026-04-24 Fixed in 2.17 CWE-190

TI-2026-30015 CVE-2026-41415

PJSIP: SIP Multipart CID URI Length Underflow

LOW 35

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.7 Network No auth No interaction EPSS 0.00308 Published 2026-04-24 Fixed in 2.17 CWE-125

TI-2026-26530 CVE-2026-34235

PJSIP: Heap OOB read in VPX unpacketizer

LOW 37

PJSIP is a free and open source multimedia communication library written in C.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2026-03-31 Fixed in 2.17 CWE-125

TI-2023-20051 CVE-2023-38703

PJSIP has use-after-free vulnerability in SRTP media transport

MEDIUM 52

PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0159 Published 2023-10-06 No fix listed CWE-416

TI-2023-12295 CVE-2023-27585

Buffer overflow in pjsip pjproject

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02311 Published 2023-03-14 No fix listed CWE-120

TI-2022-07592 CVE-2022-23537

PJSIP vulnerable to heap buffer overflow when decoding STUN message

MEDIUM 44

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01114 Published 2022-12-20 No fix listed CWE-122

TI-2022-18645 CVE-2022-39269

Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip

MEDIUM 49

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00732 Published 2022-10-06 Fixed in 2.13 CWE-319

TI-2022-13076 CVE-2022-31031

Potential stack buffer overflow when parsing message as a STUN client

MEDIUM 53

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02068 Published 2022-06-07 No fix listed CWE-120

TI-2022-08605 CVE-2022-24792

Potential infinite loop when parsing WAV format file in PJSIP

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02053 Published 2022-04-25 No fix listed CWE-835

TI-2022-08577 CVE-2022-24763

Infinite Loop in PJSIP

LOW 37

PJSIP is a free and open source multimedia communication library written in the C language.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02063 Published 2022-03-30 No fix listed CWE-835

TI-2022-08578 CVE-2022-24764

Stack buffer overflow in pjproject

MEDIUM 43

PJSIP is a free and open source multimedia communication library written in C.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02376 Published 2022-03-22 No fix listed CWE-120

TI-2022-08568 CVE-2022-24754

Buffer overflow in pjsip

MEDIUM 47

PJSIP is a free and open source multimedia communication library written in C language.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0208 Published 2022-03-11 No fix listed CWE-120

TI-2022-07661 CVE-2022-23608

Use after free in PJSIP

MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04022 Published 2022-02-22 No fix listed CWE-416

TI-2021-19296 CVE-2021-43303 · GHSA-f7jc-p66f-75xp

Buffer overflow in teluu pjsip

MEDIUM 47

Buffer overflow in PJSUA API when calling pjsua_call_dump.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02356 Published 2022-02-16 No fix listed CWE-120

Vulnerabilities

Filters