PJ
Product
pjproject
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 11Medium 6Low 0
Watch
Add pjproject to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40614 | 8.8 | Apr 21 | PJSIP: Heap buffer overflow in Opus codec decoding Affected: <= 2.16 |
| CVE-2025-65102 | 8.7 | Nov 21 | PJSIP is vulnerable to buffer overflow in Opus PLC Affected: < 2.16 |
| CVE-2026-57161 | 8.2 | Sep 4 | PJSIP: Stack overflow handling Service-Route headers in a registration response Affected: < acc03b57cef7a7d31b8e1f5b9117437d7e87c591 |
| CVE-2026-32942 | 8.1 | Mar 20 | PJSIP has ICE session use-after-free race conditions Affected: < 2.17 |
| CVE-2026-57159 | 7.5 | Sep 4 | PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance Affected: < 673b978aab1fe3ab874247be32c871acc880cbeb |
| CVE-2026-41416 | 7.5 | Apr 24 | PJSIP: Asymmetric ptime integer overflow in Media Stream Affected: < 2.17 |
| CVE-2026-33069 | 7.5 | Mar 20 | PJSIP has an Out-of-bounds Read in SIP multipart parsing Affected: < 2.17 |
| CVE-2026-28799 | 7.5 | Mar 6 | PJSIP: Heap use-after-free in PJSIP presence subscription termination handler Affected: < 2.17 |
| CVE-2026-29068 | 7.5 | Mar 6 | PJSIP: Stack buffer overflow in Opus codec parser Affected: < 2.17 |
| CVE-2026-84975 | 7.4 | Sep 18 | PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) Affected: <= 2.17 |
| CVE-2026-77396 | 7.1 | Sep 18 | PJSIP: Heap buffer overflow in the AVI parser Affected: <= 2.17 |
Showing 11
