Ppion

Products

Exploited and recent CVEs

• CVE-2026-54909 Medium 5.3 Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute 0.6%
• CVE-2026-54908 Medium 6.3 Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message 0.5%
• CVE-2026-26014 Medium 5.9 Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key 0.7%
• CVE-2025-49140 High 7.5 Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS) 0.5%
• CVE-2022-29222 Medium 5.9 Improper Certificate Validation in Pion DTLS 0.8%
• CVE-2022-29189 Medium 5.3 Buffer for inbound DTLS fragments has no limit 2.1%
• CVE-2022-29190 High 7.5 Header reconstruction method can be thrown into an infinite loop in Pion DTLS 1.7%