CVE-2026-57166 PJSIP: Pre-authentication overflow in the telnet CLI error

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57166 PJSIP: Pre-authentication overflow in the telnet CLI error

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57166

CVE-2026-57166 is a pre-authentication stack buffer overflow in the PJLIB-UTIL telnet CLI front-end of PJSIP , an open-source multimedia communication library written in C. When rendering feedback for a command line, several handling paths write an attacker-influenced amount of data into fixed-si...

CVE-2026-57166 PJSIP: Pre-authentication overflow in the telnet CLI error

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57165 PJSIP: Pre-authentication overflow in the telnet CLI history

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall handleupdown in clitelnet.c. This affects only applications that enab...

CVE-2026-57165

PJSIP (PJLIB-UTIL) contains a stack buffer overflow in the telnet CLI front-end (handle_up_down() in cli_telnet.c), triggered when redrawing the command line during history recall. The accumulated line-redraw data can exceed a fixed-size stack buffer, potentially causing application termination ....

CVE-2026-57162 PJSIP: Stack overflow parsing SDP a=crypto attributes

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162

CVE-2026-57162 is a stack buffer overflow in PJSIP 's SRTP/SDES media transport, specifically in sdes_encode_sdp() in transport_srtp_sdes.c. During SDP offer/answer negotiation, a=crypto attributes from a remote peer are collected into a fixed-size array without bounding their count. A remote att...

EUVD-2026-70800

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...

Linux Distros Unpatched Vulnerability : CVE-2026-80791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: zero the AUTHRECEIVE response buffer nvmetexecuteauthreceive allocates the response buffer with kmalloc sized by the host-supplied AUTHRECEIVE...

PT-2026-91350

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTH RECEIVE response buffer nvmet execute auth receive allocates the response buffer with kmalloc sized by the host-supplied AUTH RECEIVE allocation length, but the DH-HMAC-CHAP builders write only a...

CVE-2026-80791: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: zero the AUTHRECEIVE response buffer nvmetexecuteauthreceive allocates the response buffer with kmalloc sized by the host-supplied AUTHRECEIVE allocation length, but the DH-HMAC-CHAP builders write only a fixed-size...

PT-2026-86168

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit a1b707c Description A stack buffer overflow occurs in the SRTP/SDES media transport when processing a=crypto attributes during the Session Description Protocol SDP offer/answer process. The issue resides in the...

CVE-2026-85455

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85440

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...

CVE-2026-85455 MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85455 MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85440 MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...

CVE-2026-85440

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow in the MOOSCommPkt packet-handling code. During the HandShake phase , a remote attacker can declare a negative packet length , which bypasses the signed integer check in InflateTo() and causes a negative size conversion in ...

CVE-2026-85440 MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...