Use After Free in Pjsip Pjproject
CVE-2026-32942
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction a…
Vulnerability class: Use-After-Free
EPSS: 0.001 (18.8th percentile) — read the EPSS interpretation.
Affected products
- Pjsip Pjproject — versions < 2.17
Weakness classification (CWE)
References
- https://github.com/pjsip/pjproject/security/advisories/GHSA-g88q-c2hm-q7p7 (x_refsource_CONFIRM)
- https://github.com/pjsip/pjproject/issues/1451 (x_refsource_MISC)
- https://github.com/pjsip/pjproject/commit/c9caceddabda7f18337b2a82d25d65f6224b450a (x_refsource_MISC)