Log in Start free

pjsip

Products

ProductCVEsExploitedLatest
pjproject47–Sep 18, 2026
pjmedia-video1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-84975 High 7.4 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) 0.2%
  • CVE-2026-77396 Medium 6.9 PJSIP: Heap buffer overflow in the AVI parser 0.1%
  • CVE-2026-57166 Medium 6.3 PJSIP: Pre-authentication overflow in the telnet CLI error 0.5%
  • CVE-2026-57165 Medium 6.3 PJSIP: Pre-authentication overflow in the telnet CLI history 0.5%
  • CVE-2026-57164 High 8.3 PJSIP: Heap overflow in the HTTP client 0.5%
  • CVE-2026-57163 High 8.8 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend 0.4%
  • CVE-2026-57162 High 8.8 PJSIP: Stack overflow parsing SDP a=crypto attributes 0.6%
  • CVE-2026-57161 High 8.8 PJSIP: Stack overflow handling Service-Route headers in a registration response 0.5%
  • CVE-2026-57160 Medium 6.9 PJSIP: SIP message header buffer overflow 0.4%
  • CVE-2026-57159 High 8.4 PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance 0.6%
  • CVE-2026-42225 High 8.2 GnuTLS backend silently skips certificate chain verification when verify_peer is false 0.2%
  • CVE-2026-41416 High 8.1 PJSIP: Asymmetric ptime integer overflow in Media Stream 0.3%
  • CVE-2026-41415 Medium 6.7 PJSIP: SIP Multipart CID URI Length Underflow 0.3%
  • CVE-2026-40892 High 8.1 PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() 0.4%
  • CVE-2026-40614 High 8.5 PJSIP: Heap buffer overflow in Opus codec decoding 0.2%
  • CVE-2026-34235 Critical 9.1 PJSIP: Heap OOB read in VPX unpacketizer 0.4%
  • CVE-2026-33069 Medium 6.9 PJSIP has an Out-of-bounds Read in SIP multipart parsing 0.3%
  • CVE-2026-32945 High 8.4 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser 0.3%
  • CVE-2026-32942 High 8.0 PJSIP has ICE session use-after-free race conditions 0.3%
  • CVE-2026-28799 High 8.7 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler 0.3%
  • CVE-2026-29068 High 8.7 PJSIP: Stack buffer overflow in Opus codec parser 0.4%
  • CVE-2026-26967 High 8.1 PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer 0.3%
  • CVE-2026-26203 Medium 5.1 PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL 0.1%
  • CVE-2026-25994 High 8.1 PJSIP has a heap buffer overflow in ICE with long username 2.1%
  • CVE-2025-65102 High 8.7 PJSIP is vulnerable to buffer overflow in Opus PLC 0.3%
  • CVE-2023-38703 Critical 9.8 PJSIP has use-after-free vulnerability in SRTP media transport 1.6%
  • CVE-2023-27585 High 7.5 PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't a 2.3%
  • CVE-2022-23547 Medium 6.5 Heap buffer overflow in pjproject when decoding STUN message 1.0%
  • CVE-2022-23537 Medium 6.5 PJSIP vulnerable to heap buffer overflow when decoding STUN message 1.1%
  • CVE-2022-39244 High 7.5 Buffer overflow in pjlib scanner and pjmedia 1.5%