Buffer Overflow

libpjsip.so is vulnerable to Buffer Overflow. The vulnerability is due to the DNS resolver located in dns.c because it does not properly configure the nameserver, which allows an attacker to cause memory corruption resulting in an application crash...

Heap-Based Buffer Overflow

libpjsip.so is vulnerable to heap-based buffer overflow. An attacker is able to cause buffer overread by parsing a specially crafted STUN message with unknown attribute via multiple functions. This only affects applications using STUN including PJNATH and PJSUA-LIB...

Use After Free

libpjsip.so is affected by a use-after-free vulnerability. This vulnerability is due to the usage of invalid inputs in the pjsipuaunregisterdlg function in sipualayer.c file allowing to register to hash table multiple times with different keys resulting in dialog list collision and leading to an...