CVE-2026-57159

A flaw was found in PJSIP, a multimedia communication library. A remote attacker could exploit a vulnerability by sending a specially crafted message, known as a Session Description Protocol SDP offer or answer, when a specific feature for managing remote payload types is enabled. This could lead...

Bluetooth-Crash-CVE-2017-0785

CVE-2017-0785 Bluetooth module crash This script is a modified version of https://github.com/ojasookert/CVE-2017-0785. It leaks information via SDP due to out-of-bound bytes, but sending too many packets or search requests causes the Bluetooth module on an Android smartphone above Android 4.0 to...

DEBIAN-CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

DEBIAN-CVE-2026-57159

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

CVE-2026-57159

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

CVE-2026-57162

CVE-2026-57162 is a stack buffer overflow in PJSIP (an open-source C multimedia communication library), specifically in the SRTP/SDES media transport (sdes_encode_sdp() in transport_srtp_sdes.c). During SDP offer/answer negotiation, a=crypto attributes from a remote peer are collected into a fixe...

CVE-2026-57162 PJSIP: Stack overflow parsing SDP a=crypto attributes

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162 PJSIP: Stack overflow parsing SDP a=crypto attributes

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57159

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

CVE-2026-57159 PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

CVE-2026-57159

PJSIP is an open-source multimedia communication library in C. Prior to commit 673b978 , a crafted remote SDP offer or answer can trigger an out-of-bounds read and write in assign_pt_and_update_map() within pjmedia/src/pjmedia/sdp_neg.c, which indexes fixed-size internal tables using payload-type...

CVE-2026-57159 PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

Fedora 43 : bluez (2026-d4eec45564)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d4eec45564 advisory. BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP X...

EUVD-2026-66134

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

Linux Distros Unpatched Vulnerability : CVE-2026-80185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser...

DEBIAN-CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...