Skip to main content

Vendor/product archive

teluu / pjsip CVEs

Beta · best-effort

32 CVEs tagged to teluu / pjsip11 Critical, 14 High, 7 Medium, 0 Low, 0 Unrated.

CVE-2026-42225

Published May 7, 2026

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connec…

CVSS 8.2 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort

CVE-2026-41416

Published Apr 24, 2026

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an integer overflow in media stream buffer size calculation when proce…

CVSS 8.1 · High
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-41415

Published Apr 24, 2026

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Content-ID URI in SIP m…

CVSS 6.7 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-34235

Published Mar 31, 2026

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP unpacketize…

CVSS 6.9 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2023-38703

Published Oct 6, 2023

PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2023-27585

Published Mar 14, 2023

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS r…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2022-23537

Published Dec 20, 2022

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer ove…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2022-39269

Published Oct 6, 2022

PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to usi…

CVSS 9.1 · Critical
Vendor/product tagsBeta · best-effort

CVE-2022-31031

Published Jun 9, 2022

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2022-24792

Published Apr 25, 2022

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2022-24763

Published Mar 30, 2022

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP us…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2022-24754

Published Mar 11, 2022

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerabilit…

CVSS 8.5 · High
Vendor/product tagsBeta · best-effort

CVE-2021-43303

Published Feb 16, 2022

Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128…

CVSS 9.8 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2021-43302

Published Feb 16, 2022

Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4…

CVSS 9.1 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2021-43301

Published Feb 16, 2022

Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack b…

CVSS 9.8 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2021-43300

Published Feb 16, 2022

Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buf…

CVSS 9.8 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2021-43299

Published Feb 16, 2022

Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffe…

CVSS 9.8 · Critical
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2022-21722

Published Jan 27, 2022

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version…

CVSS 9.1 · Critical
Vendor/product tagsBeta · best-effort

CVE-2021-41141

Published Jan 4, 2022

PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In var…

CVSS 5.9 · Medium
Vendor/product tagsBeta · best-effort

CVE-2021-43845

Published Dec 27, 2021

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the…

CVSS 8.2 · High
Vendor/product tagsBeta · best-effort

CVE-2021-43804

Published Dec 22, 2021

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affecte…

CVSS 7.3 · High
Vendor/product tagsBeta · best-effort
Showing 1-25 of 32 CVEsPage 1 of 2