Linux Distros Unpatched Vulnerability : CVE-2019-15048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the AP4RtpAtom class at Core/Ap4RtpAtom.cpp. CVE-2019-15048 Note that Nessus...

CVE-2025-54995

CVE-2025-54995 affects Asterisk (open source private branch exchange). The vulnerability arises from a lack of session termination, allowing RTP UDP ports and internal resources to leak, which could lead to resource exhaustion. Debian and other advisories state this was fixed in Asterisk versions...

Asterisk 安全漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 18.26.4 and versions prior to 18.9-cert17 have a security vulnerability that stems from a lack of session termination, which could lead to the...

Linux Distros Unpatched Vulnerability : CVE-2022-21722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

Linux Distros Unpatched Vulnerability : CVE-2022-39269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP med...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core can allow remote attackers to inject or intercept RTP/SRTP streams via RTP packets. The issue is mitigated in 13.4.1.1 by changing the heuristic exposure to the first five packe...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

PT-2025-31511 · Rtpengine +1 · Rtpengine +1

Name of the Vulnerable Software and Affected Versions: rtpengine versions through mr13.3.1.4 Description: rtpengine is susceptible to RTP injection and media redirection, potentially leading to a denial-of-service DoS condition. RTP bleed allows an attacker to redirect a victim’s media, such as...

Malicious code in rtp-rapyd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0a521f8592c35bef558ae1fd9a4f584f1365784b6f3254816e6db8f4592e453 Any computer that has this package installed or running should be considered...

CVE-2025-21427

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network...

CVE-2025-21427

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network...

CVE-2025-21427 Buffer Over-read in Data HLOS - LNX

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network...

CVE-2025-21427 Buffer Over-read in Data HLOS - LNX

Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network...

CVE-2025-21427

CVE-2025-21427 is a Qualcomm closed‑source component vulnerability involving information disclosure during RTP payload decoding when a user equipment receives an RTP packet from the network. The root cause is described as a buffer over-read in the RTP payload decoding path, leading to potential l...

SUSE CVE-2025-49140

Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should...

CVE-2025-49140

Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should...

GO-2025-3748 Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS) in github.com/pion/interceptor

Pion Interceptor's improper RTP padding handling allows remote crash for SFU users DoS in github.com/pion/interceptor...