Advisories · Technology
pjsip pjproject.
Every CVE that names pjsip pjproject among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
- pjsip pjproject
- Weak cryptography or TLS
- CVSS 6.9 Medium
PJSIP: Heap buffer overflow in the AVI parser
- pjsip pjproject
- Memory corruption
- CVSS 6.3 Medium
PJSIP: Pre-authentication overflow in the telnet CLI error
- pjsip pjproject
- Memory corruption
- CVSS 6.3 Medium
PJSIP: Pre-authentication overflow in the telnet CLI history
- pjsip pjproject
- Memory corruption
- CVSS 8.3 High
PJSIP: Heap overflow in the HTTP client
- pjsip pjproject
- Memory corruption
- CVSS 8.8 High
PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend
- pjsip pjproject
- Memory corruption
- CVSS 8.8 High
PJSIP: Stack overflow parsing SDP a=crypto attributes
- pjsip pjproject
- Memory corruption
- CVSS 8.8 High
PJSIP: Stack overflow handling Service-Route headers in a registration response
- pjsip pjproject
- Memory corruption
- CVSS 6.9 Medium
PJSIP: SIP message header buffer overflow
- pjsip pjproject
- CWE-193
- CVSS 8.4 High
PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance
- pjsip pjproject
- Memory corruption
- CWE-129
- CVSS 8.2 High
GnuTLS backend silently skips certificate chain verification when verify_peer is false
- pjsip pjproject
- Weak cryptography or TLS
- CVSS 8.1 High
PJSIP: Asymmetric ptime integer overflow in Media Stream
- pjsip pjproject
- Memory corruption
- CVSS 6.7 Medium
PJSIP: SIP Multipart CID URI Length Underflow
- pjsip pjproject
- Memory corruption
- CVSS 8.1 High
PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()
- pjsip pjproject
- Memory corruption
- CVSS 8.5 High
PJSIP: Heap buffer overflow in Opus codec decoding
- pjsip pjproject
- Memory corruption
- CVSS 6.9 Medium
PJSIP: Heap OOB read in VPX unpacketizer
- pjsip pjproject
- Memory corruption
- CVSS 6.9 Medium
PJSIP has an Out-of-bounds Read in SIP multipart parsing
- pjsip pjproject
- Memory corruption
- CVSS 8.4 High
PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser
- pjsip pjproject
- Memory corruption
- CVSS 8.0 High
PJSIP has ICE session use-after-free race conditions
- pjsip pjproject
- Memory corruption
- CVSS 8.7 High
PJSIP: Heap use-after-free in PJSIP presence subscription termination handler
- pjsip pjproject
- Memory corruption
- CVSS 8.7 High
PJSIP: Stack buffer overflow in Opus codec parser
- pjsip pjproject
- Memory corruption
- CVSS 8.1 High
PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer
- pjsip pjproject
- Memory corruption
- CVSS 8.1 High
PJSIP has a heap buffer overflow in ICE with long username
- pjsip pjproject
- Memory corruption
- CVSS 8.7 High
PJSIP is vulnerable to buffer overflow in Opus PLC
- pjsip pjproject
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
PJSIP has use-after-free vulnerability in SRTP media transport
- pjsip pjproject
- Memory corruption
- CVSS 7.5 High
Heap-based buffer overflow in pjsip pjproject
- pjsip pjproject
- Memory corruption
- CVSS 6.5 Medium
Heap buffer overflow in pjproject when decoding STUN message
- pjsip pjproject
- Memory corruption
- CVSS 6.5 Medium
PJSIP vulnerable to heap buffer overflow when decoding STUN message
- pjsip pjproject
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip
- pjsip pjproject
- Weak cryptography or TLS
- CVSS 7.5 High
Buffer overflow in pjlib scanner and pjmedia
- pjsip pjproject
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Potential stack buffer overflow when parsing message as a STUN client
- pjsip pjproject
- Memory corruption
- CVSS 7.5 High
Potential infinite loop when parsing WAV format file in PJSIP
- pjsip pjproject
- Denial of service
- CVSS 7.5 High
Potential heap buffer overflow when parsing DNS packets in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Potential out-of-bound read/write in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 7.5 High
Infinite Loop in PJSIP
- pjsip pjproject
- Denial of service
- CVSS 7.5 High
Stack buffer overflow in pjproject
- pjsip pjproject
- Memory corruption
- CVSS 8.5 High
Buffer overflow in pjsip
- pjsip pjproject
- Memory corruption
- CVSS 8.1 High
Use after free in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Out-of-bounds read in multipart parsing in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
Potential out-of-bound read during RTP/RTCP parsing in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 5.9 Medium
Missing release of locks in PJSIP
- pjsip pjproject
- CWE-667
- CVSS 8.2 High
Prevent out-of-bounds read in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 7.3 High
Out-of-bounds read when parsing RTCP BYE message in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 7.3 High
Potential integer underflow upon receiving STUN message in PJSIP
- pjsip pjproject
- Memory corruption
- CVSS 5.9 Medium
Denial of Service in PJSIP
- pjsip pjproject
- Race condition
- CVSS 6.5 Medium
Crash in receiving updated SDP answer after initial SDP negotiation failed
- pjsip pjproject
- Denial of service
- CVSS 6.8 Medium
Existing TLS connections can be reused without checking remote hostname
- pjsip pjproject
- Weak cryptography or TLS