agentprime: pjsip-pjprojectEvery new CVE for pjsip-pjproject.https://agentprime.io/CVE-2026-84975: PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)https://agentprime.io/advisories/CVE-2026-84975/https://agentprime.io/advisories/CVE-2026-84975/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:08:33 GMTCVECVE-2026-77396: PJSIP: Heap buffer overflow in the AVI parserhttps://agentprime.io/advisories/CVE-2026-77396/https://agentprime.io/advisories/CVE-2026-77396/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:07:50 GMTCVECVE-2026-57166: PJSIP: Pre-authentication overflow in the telnet CLI errorhttps://agentprime.io/advisories/CVE-2026-57166/https://agentprime.io/advisories/CVE-2026-57166/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:12:10 GMTCVECVE-2026-57165: PJSIP: Pre-authentication overflow in the telnet CLI historyhttps://agentprime.io/advisories/CVE-2026-57165/https://agentprime.io/advisories/CVE-2026-57165/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:12:01 GMTCVECVE-2026-57164: PJSIP: Heap overflow in the HTTP clienthttps://agentprime.io/advisories/CVE-2026-57164/https://agentprime.io/advisories/CVE-2026-57164/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:11:55 GMTCVECVE-2026-57163: PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backendhttps://agentprime.io/advisories/CVE-2026-57163/https://agentprime.io/advisories/CVE-2026-57163/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:11:40 GMTCVECVE-2026-57162: PJSIP: Stack overflow parsing SDP a=crypto attributeshttps://agentprime.io/advisories/CVE-2026-57162/https://agentprime.io/advisories/CVE-2026-57162/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:11:37 GMTCVECVE-2026-57161: PJSIP: Stack overflow handling Service-Route headers in a registration responsehttps://agentprime.io/advisories/CVE-2026-57161/https://agentprime.io/advisories/CVE-2026-57161/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:11:33 GMTCVECVE-2026-57160: PJSIP: SIP message header buffer overflowhttps://agentprime.io/advisories/CVE-2026-57160/https://agentprime.io/advisories/CVE-2026-57160/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:11:29 GMTCVECVE-2026-57159: PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenancehttps://agentprime.io/advisories/CVE-2026-57159/https://agentprime.io/advisories/CVE-2026-57159/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:11:26 GMTCVECVE-2026-42225: GnuTLS backend silently skips certificate chain verification when verify_peer is falsehttps://agentprime.io/advisories/CVE-2026-42225/https://agentprime.io/advisories/CVE-2026-42225/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 18:47:26 GMTCVECVE-2026-41416: PJSIP: Asymmetric ptime integer overflow in Media Streamhttps://agentprime.io/advisories/CVE-2026-41416/https://agentprime.io/advisories/CVE-2026-41416/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 18:40:08 GMTCVECVE-2026-41415: PJSIP: SIP Multipart CID URI Length Underflowhttps://agentprime.io/advisories/CVE-2026-41415/https://agentprime.io/advisories/CVE-2026-41415/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 18:38:36 GMTCVECVE-2026-40892: PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()https://agentprime.io/advisories/CVE-2026-40892/https://agentprime.io/advisories/CVE-2026-40892/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 19:55:26 GMTCVECVE-2026-40614: PJSIP: Heap buffer overflow in Opus codec decodinghttps://agentprime.io/advisories/CVE-2026-40614/https://agentprime.io/advisories/CVE-2026-40614/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 18:04:15 GMTCVECVE-2026-34235: PJSIP: Heap OOB read in VPX unpacketizerhttps://agentprime.io/advisories/CVE-2026-34235/https://agentprime.io/advisories/CVE-2026-34235/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 15:36:47 GMTCVECVE-2026-33069: PJSIP has an Out-of-bounds Read in SIP multipart parsinghttps://agentprime.io/advisories/CVE-2026-33069/https://agentprime.io/advisories/CVE-2026-33069/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 08:21:51 GMTCVECVE-2026-32945: PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserhttps://agentprime.io/advisories/CVE-2026-32945/https://agentprime.io/advisories/CVE-2026-32945/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 03:54:00 GMTCVECVE-2026-32942: PJSIP has ICE session use-after-free race conditionshttps://agentprime.io/advisories/CVE-2026-32942/https://agentprime.io/advisories/CVE-2026-32942/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 03:43:37 GMTCVECVE-2026-28799: PJSIP: Heap use-after-free in PJSIP presence subscription termination handlerhttps://agentprime.io/advisories/CVE-2026-28799/https://agentprime.io/advisories/CVE-2026-28799/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 06:36:55 GMTCVECVE-2026-29068: PJSIP: Stack buffer overflow in Opus codec parserhttps://agentprime.io/advisories/CVE-2026-29068/https://agentprime.io/advisories/CVE-2026-29068/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Mar 2026 06:36:45 GMTCVECVE-2026-26967: PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizerhttps://agentprime.io/advisories/CVE-2026-26967/https://agentprime.io/advisories/CVE-2026-26967/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 00:26:54 GMTCVECVE-2026-25994: PJSIP has a heap buffer overflow in ICE with long usernamehttps://agentprime.io/advisories/CVE-2026-25994/https://agentprime.io/advisories/CVE-2026-25994/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 20:56:47 GMTCVECVE-2025-65102: PJSIP is vulnerable to buffer overflow in Opus PLChttps://agentprime.io/advisories/CVE-2025-65102/https://agentprime.io/advisories/CVE-2025-65102/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 21:36:58 GMTCVECVE-2023-38703: PJSIP has use-after-free vulnerability in SRTP media transporthttps://agentprime.io/advisories/CVE-2023-38703/https://agentprime.io/advisories/CVE-2023-38703/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Oct 2023 13:46:54 GMTCVEcriticalCVE-2023-27585: Heap-based buffer overflow in pjsip pjprojecthttps://agentprime.io/advisories/CVE-2023-27585/https://agentprime.io/advisories/CVE-2023-27585/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Mar 2023 00:00:00 GMTCVECVE-2022-23547: Heap buffer overflow in pjproject when decoding STUN messagehttps://agentprime.io/advisories/CVE-2022-23547/https://agentprime.io/advisories/CVE-2022-23547/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Dec 2022 14:00:22 GMTCVECVE-2022-23537: PJSIP vulnerable to heap buffer overflow when decoding STUN messagehttps://agentprime.io/advisories/CVE-2022-23537/https://agentprime.io/advisories/CVE-2022-23537/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Dec 2022 18:50:45 GMTCVECVE-2022-39269: Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsiphttps://agentprime.io/advisories/CVE-2022-39269/https://agentprime.io/advisories/CVE-2022-39269/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Oct 2022 00:00:00 GMTCVEcriticalCVE-2022-39244: Buffer overflow in pjlib scanner and pjmediahttps://agentprime.io/advisories/CVE-2022-39244/https://agentprime.io/advisories/CVE-2022-39244/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Oct 2022 00:00:00 GMTCVECVE-2022-31031: Potential stack buffer overflow when parsing message as a STUN clienthttps://agentprime.io/advisories/CVE-2022-31031/https://agentprime.io/advisories/CVE-2022-31031/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jun 2022 00:00:00 GMTCVEcriticalCVE-2022-24792: Potential infinite loop when parsing WAV format file in PJSIPhttps://agentprime.io/advisories/CVE-2022-24792/https://agentprime.io/advisories/CVE-2022-24792/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Apr 2022 00:00:00 GMTCVECVE-2022-24793: Potential heap buffer overflow when parsing DNS packets in PJSIPhttps://agentprime.io/advisories/CVE-2022-24793/https://agentprime.io/advisories/CVE-2022-24793/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Apr 2022 00:00:00 GMTCVECVE-2022-24786: Potential out-of-bound read/write in PJSIPhttps://agentprime.io/advisories/CVE-2022-24786/https://agentprime.io/advisories/CVE-2022-24786/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 Apr 2022 00:00:00 GMTCVEcriticalCVE-2022-24763: Infinite Loop in PJSIPhttps://agentprime.io/advisories/CVE-2022-24763/https://agentprime.io/advisories/CVE-2022-24763/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Mar 2022 00:00:00 GMTCVECVE-2022-24764: Stack buffer overflow in pjprojecthttps://agentprime.io/advisories/CVE-2022-24764/https://agentprime.io/advisories/CVE-2022-24764/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Mar 2022 00:00:00 GMTCVECVE-2022-24754: Buffer overflow in pjsiphttps://agentprime.io/advisories/CVE-2022-24754/https://agentprime.io/advisories/CVE-2022-24754/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Mar 2022 00:00:00 GMTCVECVE-2022-23608: Use after free in PJSIPhttps://agentprime.io/advisories/CVE-2022-23608/https://agentprime.io/advisories/CVE-2022-23608/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Feb 2022 00:00:00 GMTCVECVE-2022-21723: Out-of-bounds read in multipart parsing in PJSIPhttps://agentprime.io/advisories/CVE-2022-21723/https://agentprime.io/advisories/CVE-2022-21723/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jan 2022 00:00:00 GMTCVEcriticalCVE-2022-21722: Potential out-of-bound read during RTP/RTCP parsing in PJSIPhttps://agentprime.io/advisories/CVE-2022-21722/https://agentprime.io/advisories/CVE-2022-21722/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Jan 2022 00:00:00 GMTCVEcriticalCVE-2021-41141: Missing release of locks in PJSIPhttps://agentprime.io/advisories/CVE-2021-41141/https://agentprime.io/advisories/CVE-2021-41141/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Jan 2022 00:00:00 GMTCVECVE-2021-43845: Prevent out-of-bounds read in PJSIPhttps://agentprime.io/advisories/CVE-2021-43845/https://agentprime.io/advisories/CVE-2021-43845/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Dec 2021 00:00:00 GMTCVECVE-2021-43804: Out-of-bounds read when parsing RTCP BYE message in PJSIPhttps://agentprime.io/advisories/CVE-2021-43804/https://agentprime.io/advisories/CVE-2021-43804/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Dec 2021 00:00:00 GMTCVECVE-2021-37706: Potential integer underflow upon receiving STUN message in PJSIPhttps://agentprime.io/advisories/CVE-2021-37706/https://agentprime.io/advisories/CVE-2021-37706/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Dec 2021 00:00:00 GMTCVECVE-2021-32686: Denial of Service in PJSIPhttps://agentprime.io/advisories/CVE-2021-32686/https://agentprime.io/advisories/CVE-2021-32686/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jul 2021 00:00:00 GMTCVECVE-2021-21375: Crash in receiving updated SDP answer after initial SDP negotiation failedhttps://agentprime.io/advisories/CVE-2021-21375/https://agentprime.io/advisories/CVE-2021-21375/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Mar 2021 22:30:25 GMTCVECVE-2020-15260: Existing TLS connections can be reused without checking remote hostnamehttps://agentprime.io/advisories/CVE-2020-15260/https://agentprime.io/advisories/CVE-2020-15260/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Mar 2021 22:30:16 GMTCVE