Pjsip

39 CVEs across 4 Pjsip products. Browse Pjsip vulnerabilities, severities, and proof-of-concept exploits.

Pjsip products with known CVEs

ProductCVEs
Pjproject37
Pjsip14
Pjmedia-Video1
Pjsua2 Sdk1
Pjsip CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-42225Medium5.92026-05-07PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tl…
CVE-2026-41416High7.52026-04-24PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an integer overflow in media stream buffer size ca…
CVE-2026-41415Critical9.12026-04-24PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Con…
CVE-2026-40892Critical9.82026-04-21PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsip_auth_create_digest2…
CVE-2026-40614High8.82026-04-21PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a buffer overflow when decoding Opus audio frames…
CVE-2026-34235Critical9.12026-03-31PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap out-of-bounds read vulnerability exists in PJSIP's…
CVE-2026-33069High7.52026-03-20PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multip…
CVE-2026-32945Critical9.82026-03-20PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DN…
CVE-2026-32942High8.12026-03-20PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE…
CVE-2026-29068High7.52026-03-06PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmed…
CVE-2026-28799High7.52026-03-06PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's eve…
CVE-2026-26967Medium5.32026-02-20PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulne…
CVE-2026-26203Medium6.52026-02-19PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 p…
CVE-2026-25994Critical9.82026-02-11PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Sessio…
CVE-2025-651022025-11-21PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, w…
CVE-2023-38703Critical9.82023-10-06PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher l…
CVE-2023-27585High7.52023-03-14PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications…
CVE-2022-23547Medium6.52022-12-23PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2022-23537Medium6.52022-12-20PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2022-39269Critical9.12022-10-06PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP me…
CVE-2022-39244High7.52022-10-06PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and PJ…
CVE-2022-31031Critical9.82022-06-09PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2022-24792High7.52022-04-25PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that…
CVE-2022-24793High7.52022-04-06PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications…
CVE-2022-24786Critical9.82022-04-06PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Referenc…
CVE-2022-24763High7.52022-03-30PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability t…
CVE-2022-24764High7.52022-03-22PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affec…
CVE-2022-24754High8.52022-03-11PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer o…
CVE-2022-23608High8.12022-02-22PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2022-21723Critical9.12022-01-27PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2022-21722Critical9.12022-01-27PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2021-41141Medium5.92022-01-04PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, T…
CVE-2021-43845High8.22021-12-27PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not…
CVE-2021-43804High7.32021-12-22PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2021-37706High7.32021-12-22PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2021-32686Medium5.92021-07-23PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2021-21375Medium6.52021-03-10PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2020-15260Medium6.82021-03-10PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN…
CVE-2015-2003Critical9.82018-03-29The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable c…