CVE-2021-43301

Stack overflow in PJSUA API when calling pjsuaplaylistcreate. An attacker-controlled 'filenames' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation...

CVE-2021-43299

Stack overflow in PJSUA API when calling pjsuaplayercreate. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation...

CVE-2021-43303

Buffer overflow in PJSUA API when calling pjsuacalldump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer, regardless of the 'maxlen' argument supplied...

CVE-2021-43303

CVE-2021-43303 affects ring (embedded pjproject). A buffer overflow in the PJSUA API when calling pjsua_call_dump is caused by an attacker-controlled buffer argument; if the output buffer is smaller than 128 characters, it can overflow despite maxlen. Debian and Ubuntu advisories (DLA-3887, USN-6...