PJ
Product
Pjsip
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 14Medium 8Low 0
Watch
Add Pjsip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38703 | 9.8 | Oct 6 | PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages Affected: through 2.13.1 |
| CVE-2022-23537 | 9.8 | Dec 20 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: before 2.13.1 |
| CVE-2022-31031 | 9.8 | Jun 9 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.12.1 |
| CVE-2022-24754 | 9.8 | Mar 11 | PJSIP is a free and open source multimedia communication library written in C language Affected: through 2.12 |
| CVE-2022-23608 | 9.8 | Feb 22 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.11.1 |
| CVE-2021-43303 | 9.8 | Feb 16 | Buffer overflow in PJSUA API when calling pjsua_call_dump Affected: through 2.11.1 |
| CVE-2021-43301 | 9.8 | Feb 16 | Stack overflow in PJSUA API when calling pjsua_playlist_create Affected: through 2.11.1 |
| CVE-2021-43300 | 9.8 | Feb 16 | Stack overflow in PJSUA API when calling pjsua_recorder_create Affected: through 2.11.1 |
| CVE-2021-43299 | 9.8 | Feb 16 | Stack overflow in PJSUA API when calling pjsua_player_create Affected: through 2.11.1 |
| CVE-2021-37706 | 9.8 | Dec 22 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.11.1 |
| CVE-2017-16872 | 9.8 | Nov 17 | An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1 Affected: before 2.7.1 |
| CVE-2026-57163 | 9.1 | Sep 4 | PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend Affected: through 2.17 |
| CVE-2026-57162 | 9.1 | Sep 4 | PJSIP: Stack overflow parsing SDP a=crypto attributes Affected: through 2.17 |
| CVE-2026-41415 | 9.1 | Apr 24 | PJSIP: SIP Multipart CID URI Length Underflow Affected: before 2.17 |
| CVE-2026-34235 | 9.1 | Mar 31 | PJSIP: Heap OOB read in VPX unpacketizer Affected: before 2.17 |
| CVE-2022-39269 | 9.1 | Oct 6 | Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip Affected: 2.11 before 2.13 |
| CVE-2021-43302 | 9.1 | Feb 16 | Read out-of-bounds in PJSUA API when calling pjsua_recorder_create Affected: through 2.11.1 |
| CVE-2022-21723 | 9.1 | Jan 27 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.11.1 |
| CVE-2022-21722 | 9.1 | Jan 27 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.11.1 |
| CVE-2021-43845 | 9.1 | Dec 27 | PJSIP is a free and open source multimedia communication library Affected: through 2.11.1 |
| CVE-2026-57161 | 8.2 | Sep 4 | PJSIP: Stack overflow handling Service-Route headers in a registration response Affected: through 2.17 |
| CVE-2026-57159 | 7.5 | Sep 4 | PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance Affected: through 2.17 |
| CVE-2026-41416 | 7.5 | Apr 24 | PJSIP: Asymmetric ptime integer overflow in Media Stream Affected: before 2.17 |
| CVE-2023-27585 | 7.5 | Mar 14 | PJSIP is a free and open source multimedia communication library written in C Affected: before 2.13 |
| CVE-2022-24792 | 7.5 | Apr 25 | PJSIP is a free and open source multimedia communication library written in C Affected: through 2.12 |
| CVE-2022-24763 | 7.5 | Mar 30 | PJSIP is a free and open source multimedia communication library written in the C language Affected: 2.5 before 2.13 |
| CVE-2022-24764 | 7.5 | Mar 22 | PJSIP is a free and open source multimedia communication library written in C Affected: through 2.12 |
| CVE-2021-41141 | 7.5 | Jan 4 | PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.11.1 |
| CVE-2018-1000099 | 7.5 | Mar 13 | Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash Affected: through 2.7.1 |
| CVE-2018-1000098 | 7.5 | Mar 13 | Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash Affected: through 2.7.1 |
| CVE-2017-16875 | 7.5 | Nov 17 | An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1 Affected: before 2.7.1 |
| CVE-2026-84975 | 7.4 | Sep 18 | PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) Affected: through 2.17 |
| CVE-2021-43804 | 7.3 | Dec 22 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.11.1 |
| CVE-2026-77396 | 7.1 | Sep 18 | PJSIP: Heap buffer overflow in the AVI parser Affected: through 2.17 |
| CVE-2020-15260 | 6.8 | Mar 10 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.10 |
| CVE-2021-21375 | 6.5 | Mar 10 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: through 2.10 |
| CVE-2026-57164 | 5.9 | Sep 4 | PJSIP: Heap overflow in the HTTP client Affected: through 2.17 |
| CVE-2026-42225 | 5.9 | May 7 | GnuTLS backend silently skips certificate chain verification when verify_peer is false Affected: before 2.17 |
| CVE-2021-32686 | 5.9 | Jul 23 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE Affected: before 2.11.1 |
| CVE-2026-57166 | 5.3 | Sep 4 | PJSIP: Pre-authentication overflow in the telnet CLI error Affected: through 2.17 |
| CVE-2026-57165 | 5.3 | Sep 4 | PJSIP: Pre-authentication overflow in the telnet CLI history Affected: through 2.17 |
| CVE-2026-57160 | 5.3 | Sep 4 | PJSIP: SIP message header buffer overflow Affected: through 2.17 |
Showing 42