CVE-2026-32945

CVE-2026-32945 PJSIP DNS Compression Pointer Heap OOB Read Remote DoS Description getnamelen and getname in pjlib-util/src/pjlib-util/dns.c read a 2-byte DNS compression pointer via pjmemcpy&offset, p, 2 without checking that both bytes lie within the packet buffer. When a 0xC0 byte compression...

pjsip:fuzz-audio: Heap-buffer-overflow in opus_repacketizer_out_range_impl

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=4561975815503872 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-audio Job Type: libfuzzerasanpjsip Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x757fac4e08d2...

📄 PJPROJECT 2.16 Buffer Overflow

PJPROJECT versions 2.16 and below suffer from a heap buffer overflow vulnerability. Exploit Title: PJPROJECT 2.16 - Heap Bufferoverflow Google Dork: CVE-2026-25994 PJSIP PJNATH pjsip ≤ 2.16 Date: Apr 6 2026 Exploit Author: V.Nos - BinSmaser Team Vendor Homepage: https://github.com/pjsip/pjproject...

PJPROJECT 2.16 - Heap Bufferoverflow

Exploit Title: PJPROJECT 2.16 - Heap Bufferoverflow Google Dork: CVE-2026-25994 PJSIP PJNATH pjsip ≤ 2.16 Date: Apr 6 2026 Exploit Author: V.Nos - BinSmaser Team Vendor Homepage: https://github.com/pjsip/pjproject Software Link: https://github.com/VABISMO/cve-2026-25994PJSIP Version: rxufrag; -...

CVE-2026-40614

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a buffer overflow when decoding Opus audio frames due to insufficient buffer size validation in the Opus codec decode path. The FEC decode buffers decframe.buf were allocated based on a...

Ubuntu: Security Advisory (USN-8122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pjsip:fuzz-sip: Use-of-uninitialized-value in pjsip_auth_clt_init_req

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5352060429336576 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-sip Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

EUVD-2017-8049

Malware in sbrugna...

EUVD-2017-8046

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-16875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an...

Use-After-Free

pjproject is vulnerable to Use-After-Free. The vulnerability is due to the mishandling of SRTP and media transports other than UDP, leading to potential memory corruption...

CVE-2022-23547 Heap buffer overflow in pjproject when decoding STUN message

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...

CVE-2022-23547 Heap buffer overflow in pjproject when decoding STUN message

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability...

pjsip:fuzz-stun: Heap-buffer-overflow in decode_errcode_attr

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5114388095041536 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-stun Job Type: libfuzzerasanpjsip Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000014a...

pjsip:fuzz-sip: Use-of-uninitialized-value in find_handler

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5215786350542848 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-sip Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

pjsip:fuzz-stun: Heap-buffer-overflow in pj_strdup

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5103694893154304 Project: pjsip Fuzzing Engine: afl Fuzz Target: fuzz-stun Job Type: aflasanpjsip Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61500006e9bd Crash State:...

Stack Buffer Overflow

pjproject, edge is vulnerable to stack buffer overflow. The vulnerability exists because pjsip users that use STUN in their applications, either by: setting a STUN server in their account/media config in pjsua/pjsua2 level, or directly using pjlib-util/stunsimple api...

Debian DLA-3036-1 : pjproject - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3036 advisory. - PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability tha...

Debian: Security Advisory (DLA-3036-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3036-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3036-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 31, 2022 https://wiki.debian.org/LTS -...