PJ
Product
pjproject
by pjsip · last CVE Sep 18, 2026
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 11Medium 6Low 0
Watch

Add pjproject to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40614
8.8
0%
Apr 21
PJSIP: Heap buffer overflow in Opus codec decoding
Affected: <= 2.16
CVE-2025-65102
8.7
0%
Nov 21
PJSIP is vulnerable to buffer overflow in Opus PLC
Affected: < 2.16
CVE-2026-57161
8.2
0%
Sep 4
PJSIP: Stack overflow handling Service-Route headers in a registration response
Affected: < acc03b57cef7a7d31b8e1f5b9117437d7e87c591
CVE-2026-32942
8.1
0%
Mar 20
PJSIP has ICE session use-after-free race conditions
Affected: < 2.17
CVE-2026-57159
7.5
1%
Sep 4
PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance
Affected: < 673b978aab1fe3ab874247be32c871acc880cbeb
CVE-2026-41416
7.5
0%
Apr 24
PJSIP: Asymmetric ptime integer overflow in Media Stream
Affected: < 2.17
CVE-2026-33069
7.5
0%
Mar 20
PJSIP has an Out-of-bounds Read in SIP multipart parsing
Affected: < 2.17
CVE-2026-28799
7.5
0%
Mar 6
PJSIP: Heap use-after-free in PJSIP presence subscription termination handler
Affected: < 2.17
CVE-2026-29068
7.5
0%
Mar 6
PJSIP: Stack buffer overflow in Opus codec parser
Affected: < 2.17
CVE-2026-84975
7.4
0%
Sep 18
PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
Affected: <= 2.17
CVE-2026-77396
7.1
0%
Sep 18
PJSIP: Heap buffer overflow in the AVI parser
Affected: <= 2.17
Showing 11