CVEs we hold for Pjsip
Records whose assigning authority named Pjsip as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-84975PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and…pjsip pjproject CVE-2026-77396PJSIP: Heap buffer overflow in the AVI parserpjsip pjproject CVE-2026-57166PJSIP: Pre-authentication overflow in the telnet CLI errorpjsip pjproject CVE-2026-57165PJSIP: Pre-authentication overflow in the telnet CLI historypjsip pjproject CVE-2026-57163PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backendpjsip pjproject CVE-2026-57162PJSIP: Stack overflow parsing SDP a=crypto attributespjsip pjproject CVE-2026-57161PJSIP: Stack overflow handling Service-Route headers in a registration responsepjsip pjproject CVE-2026-57160PJSIP: SIP message header buffer overflowpjsip pjproject CVE-2026-57159PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenancepjsip pjproject CVE-2026-42225GnuTLS backend silently skips certificate chain verification when verify_peer is falsepjsip pjproject CVE-2026-41416PJSIP: Asymmetric ptime integer overflow in Media Streampjsip pjproject CVE-2026-41415PJSIP: SIP Multipart CID URI Length Underflowpjsip pjproject CVE-2026-40892PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()pjsip pjproject CVE-2026-40614PJSIP: Heap buffer overflow in Opus codec decodingpjsip pjproject CVE-2026-33069PJSIP has an Out-of-bounds Read in SIP multipart parsingpjsip pjproject CVE-2026-32945PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserpjsip pjproject CVE-2026-32942PJSIP has ICE session use-after-free race conditionspjsip pjproject CVE-2026-29068PJSIP: Stack buffer overflow in Opus codec parserpjsip pjproject CVE-2026-28799PJSIP: Heap use-after-free in PJSIP presence subscription termination handlerpjsip pjproject CVE-2026-26967PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizerpjsip pjproject CVE-2026-26203PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NALpjsip pjmedia-video CVE-2026-25994PJSIP has a heap buffer overflow in ICE with long usernamepjsip pjproject CVE-2025-65102PJSIP is vulnerable to buffer overflow in Opus PLCpjsip pjproject CVE-2023-38703PJSIP has use-after-free vulnerability in SRTP media transportpjsip pjproject CVE-2022-39269Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsippjsip pjproject CVE-2022-39244Buffer overflow in pjlib scanner and pjmediapjsip pjproject CVE-2022-31031Potential stack buffer overflow when parsing message as a STUN clientpjsip pjproject CVE-2022-24793Potential heap buffer overflow when parsing DNS packets in PJSIPpjsip pjproject CVE-2022-24792Potential infinite loop when parsing WAV format file in PJSIPpjsip pjproject CVE-2022-24786Potential out-of-bound read/write in PJSIPpjsip pjproject CVE-2022-23547Heap buffer overflow in pjproject when decoding STUN messagepjsip pjproject CVE-2022-23537PJSIP vulnerable to heap buffer overflow when decoding STUN messagepjsip pjproject CVE-2022-21723Out-of-bounds read in multipart parsing in PJSIPpjsip pjproject CVE-2022-21722Potential out-of-bound read during RTP/RTCP parsing in PJSIPpjsip pjproject CVE-2021-43804Out-of-bounds read when parsing RTCP BYE message in PJSIPpjsip pjproject CVE-2021-37706Potential integer underflow upon receiving STUN message in PJSIPpjsip pjproject CVE-2021-21375Crash in receiving updated SDP answer after initial SDP negotiation failedpjsip pjproject CVE-2020-15260Existing TLS connections can be reused without checking remote hostnamepjsip pjproject 48 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.