pjsip pjproject

• CVE-2026-84975 High 7.4 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) 0.2%
• CVE-2026-77396 Medium 6.9 PJSIP: Heap buffer overflow in the AVI parser 0.1%
• CVE-2026-57166 Medium 6.3 PJSIP: Pre-authentication overflow in the telnet CLI error 0.5%
• CVE-2026-57165 Medium 6.3 PJSIP: Pre-authentication overflow in the telnet CLI history 0.5%
• CVE-2026-57164 High 8.3 PJSIP: Heap overflow in the HTTP client 0.5%
• CVE-2026-57163 High 8.8 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend 0.4%
• CVE-2026-57162 High 8.8 PJSIP: Stack overflow parsing SDP a=crypto attributes 0.6%
• CVE-2026-57161 High 8.8 PJSIP: Stack overflow handling Service-Route headers in a registration response 0.5%
• CVE-2026-57160 Medium 6.9 PJSIP: SIP message header buffer overflow 0.4%
• CVE-2026-57159 High 8.4 PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance 0.6%
• CVE-2026-42225 High 8.2 GnuTLS backend silently skips certificate chain verification when verify_peer is false 0.2%
• CVE-2026-41416 High 8.1 PJSIP: Asymmetric ptime integer overflow in Media Stream 0.3%
• CVE-2026-41415 Medium 6.7 PJSIP: SIP Multipart CID URI Length Underflow 0.3%
• CVE-2026-40892 High 8.1 PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() 0.4%
• CVE-2026-40614 High 8.5 PJSIP: Heap buffer overflow in Opus codec decoding 0.2%
• CVE-2026-34235 Critical 9.1 PJSIP: Heap OOB read in VPX unpacketizer 0.4%
• CVE-2026-33069 Medium 6.9 PJSIP has an Out-of-bounds Read in SIP multipart parsing 0.3%
• CVE-2026-32945 High 8.4 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser 0.3%
• CVE-2026-32942 High 8.0 PJSIP has ICE session use-after-free race conditions 0.3%
• CVE-2026-28799 High 8.7 PJSIP: Heap use-after-free in PJSIP presence subscription termination handler 0.3%
• CVE-2026-29068 High 8.7 PJSIP: Stack buffer overflow in Opus codec parser 0.4%
• CVE-2026-26967 High 8.1 PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer 0.3%
• CVE-2026-25994 High 8.1 PJSIP has a heap buffer overflow in ICE with long username 2.1%
• CVE-2025-65102 High 8.7 PJSIP is vulnerable to buffer overflow in Opus PLC 0.3%
• CVE-2023-38703 Critical 9.8 PJSIP has use-after-free vulnerability in SRTP media transport 1.6%
• CVE-2023-27585 High 7.5 PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't a 2.3%
• CVE-2022-23547 Medium 6.5 Heap buffer overflow in pjproject when decoding STUN message 1.0%
• CVE-2022-23537 Medium 6.5 PJSIP vulnerable to heap buffer overflow when decoding STUN message 1.1%
• CVE-2022-39244 High 7.5 Buffer overflow in pjlib scanner and pjmedia 1.5%
• CVE-2022-39269 Critical 9.1 Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip 0.7%
• CVE-2022-31031 Critical 9.8 Potential stack buffer overflow when parsing message as a STUN client 2.1%
• CVE-2022-24792 High 7.5 Potential infinite loop when parsing WAV format file in PJSIP 2.1%
• CVE-2022-24793 High 7.5 Potential heap buffer overflow when parsing DNS packets in PJSIP 2.2%
• CVE-2022-24786 Critical 9.8 Potential out-of-bound read/write in PJSIP 2.1%
• CVE-2022-24763 High 7.5 Infinite Loop in PJSIP 2.1%
• CVE-2022-24764 High 7.5 Stack buffer overflow in pjproject 2.4%
• CVE-2022-24754 High 8.5 Buffer overflow in pjsip 2.1%
• CVE-2022-23608 High 8.1 Use after free in PJSIP 4.0%
• CVE-2022-21723 Critical 9.1 Out-of-bounds read in multipart parsing in PJSIP 4.4%
• CVE-2022-21722 Critical 9.1 Potential out-of-bound read during RTP/RTCP parsing in PJSIP 2.3%
• CVE-2021-41141 Medium 5.9 Missing release of locks in PJSIP 1.4%
• CVE-2021-43845 High 8.2 Prevent out-of-bounds read in PJSIP 3.9%
• CVE-2021-37706 High 7.3 Potential integer underflow upon receiving STUN message in PJSIP 4.9%
• CVE-2021-43804 High 7.3 Out-of-bounds read when parsing RTCP BYE message in PJSIP 2.3%
• CVE-2021-32686 Medium 5.9 Denial of Service in PJSIP 2.1%
• CVE-2021-21375 Medium 6.5 Crash in receiving updated SDP answer after initial SDP negotiation failed 2.1%
• CVE-2020-15260 Medium 6.8 Existing TLS connections can be reused without checking remote hostname 1.0%