PT-2026-95553

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.18 Description The OpenSSL and GnuTLS backends in pjlib/src/pj/ssl sock ossl.c and pjlib/src/pj/ssl sock gtls.c use string functions that recalculate length and truncate embedded NUL bytes when copying DNS...

CVE-2026-84975: Improper Certificate Validation

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...