PJ
Vendor
pjsip
42
CVEs
0
On KEV
0
New 30D
Products
PJ9.8
pjproject
pjsip
26 CVEs0 on KEV0 new
PJ9.8
Pjsip
Pjsip
14 CVEs0 on KEV0 new
PJ6.5
pjmedia-video
pjsip
1 CVEs0 on KEV0 new
PS9.8
Pjsua2 Sdk
Pjsip
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84975 | PJ pjproject pjsip | 7.4 | Sep 18 | PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) |
| CVE-2026-77396 | PJ pjproject pjsip | 7.1 | Sep 18 | PJSIP: Heap buffer overflow in the AVI parser |
| CVE-2026-57166 | PJ pjproject pjsip | 5.3 | Sep 4 | PJSIP: Pre-authentication overflow in the telnet CLI error |
| CVE-2026-57165 | PJ pjproject pjsip | 5.3 | Sep 4 | PJSIP: Pre-authentication overflow in the telnet CLI history |
| CVE-2026-57164 | PJ pjproject pjsip | 5.9 | Sep 4 | PJSIP: Heap overflow in the HTTP client |
| CVE-2026-57163 | PJ pjproject pjsip | 9.1 | Sep 4 | PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend |
| CVE-2026-57162 | PJ pjproject pjsip | 9.1 | Sep 4 | PJSIP: Stack overflow parsing SDP a=crypto attributes |
| CVE-2026-57161 | PJ pjproject pjsip | 8.2 | Sep 4 | PJSIP: Stack overflow handling Service-Route headers in a registration response |
| CVE-2026-57160 | PJ pjproject pjsip | 5.3 | Sep 4 | PJSIP: SIP message header buffer overflow |
| CVE-2026-57159 | PJ pjproject pjsip | 7.5 | Sep 4 | PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance |
| CVE-2026-42225 | PJ pjproject pjsip | 5.9 | May 7 | GnuTLS backend silently skips certificate chain verification when verify_peer is false |
| CVE-2026-41416 | PJ pjproject pjsip | 7.5 | Apr 24 | PJSIP: Asymmetric ptime integer overflow in Media Stream |
| CVE-2026-41415 | PJ pjproject pjsip | 9.1 | Apr 24 | PJSIP: SIP Multipart CID URI Length Underflow |
| CVE-2026-40892 | PJ pjproject pjsip | 9.8 | Apr 21 | PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() |
| CVE-2026-40614 | PJ pjproject pjsip | 8.8 | Apr 21 | PJSIP: Heap buffer overflow in Opus codec decoding |
| CVE-2026-34235 | PJ pjproject pjsip | 9.1 | Mar 31 | PJSIP: Heap OOB read in VPX unpacketizer |
| CVE-2026-33069 | PJ pjproject pjsip | 7.5 | Mar 20 | PJSIP has an Out-of-bounds Read in SIP multipart parsing |
| CVE-2026-32945 | PJ pjproject pjsip | 9.8 | Mar 20 | PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser |
| CVE-2026-32942 | PJ pjproject pjsip | 8.1 | Mar 20 | PJSIP has ICE session use-after-free race conditions |
| CVE-2026-28799 | PJ pjproject pjsip | 7.5 | Mar 6 | PJSIP: Heap use-after-free in PJSIP presence subscription termination handler |
| CVE-2026-29068 | PJ pjproject pjsip | 7.5 | Mar 6 | PJSIP: Stack buffer overflow in Opus codec parser |
| CVE-2026-26967 | PJ pjproject pjsip | 5.3 | Feb 20 | PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer |
| CVE-2026-26203 | PJ pjmedia-video pjsip | 6.5 | Feb 19 | PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL |
| CVE-2026-25994 | PJ pjproject pjsip | 9.8 | Feb 11 | PJSIP has a heap buffer overflow in ICE with long username |
| CVE-2025-65102 | PJ pjproject pjsip | 8.7 | Nov 21 | PJSIP is vulnerable to buffer overflow in Opus PLC |
| CVE-2022-23547 | PJ Pjsip Pjsip | 9.8 | Dec 23 | PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE |
| CVE-2022-39244 | PJ pjproject pjsip | 9.8 | Oct 6 | Buffer overflow in pjlib scanner and pjmedia |
| CVE-2022-39269 | PJ pjproject pjsip | 9.1 | Oct 6 | Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip |
| CVE-2022-24793 | PJ Pjsip Pjsip | 7.5 | Apr 6 | PJSIP is a free and open source multimedia communication library written in C |
| CVE-2022-24786 | PJ Pjsip Pjsip | 9.8 | Apr 6 | PJSIP is a free and open source multimedia communication library written in C |
| CVE-2015-2003 | PS Pjsua2 Sdk Pjsip | 9.8 | Mar 29 | The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly… |
