CVE-2026-32945

CVE-2026-32945 PJSIP DNS 압축 포인터 힙 OOB 읽기 원격 DoS 설명 pjlib-util/src/pjlib-util/dns.c의 getnamelen 및 getname 함수는 두 바이트가 모두 패킷 버퍼 내에 있는지 확인하지 않고 pjmemcpy&offset, p, 2를 통해 2바이트 DNS 압축 포인터를 읽습니다. 0xC0 바이트압축 포인터 마커가 DNS 응답의 맨 마지막 바이트인 경우, memcpy는 힙 할당 경계를 1바이트 초과하여 읽습니다. 단일 20바이트로 조작된 DNS 응답은 OOB 읽기를 유발하...

Linux Distros Unpatched Vulnerability : CVE-2026-57166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Linux Distros Unpatched Vulnerability : CVE-2026-57164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-57165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet...

CVE-2026-57166

A flaw was found in PJSIP. A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. A remote attacker, with access to the unauthenticated telnet CLI, can send an overly long command line to trigger this issue. This can cause an...

CVE-2026-57164

A flaw was found in PJSIP. A heap buffer overflow vulnerability exists in the PJLIB-UTIL HTTP client when processing HTTP response bodies. A malicious or man-in-the-middle HTTP server can exploit this by sending a specially crafted response, leading to an incorrect size calculation and causing da...

DEBIAN-CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

DEBIAN-CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

CVE-2026-57166 PJSIP: Pre-authentication overflow in the telnet CLI error

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57165 PJSIP: Pre-authentication overflow in the telnet CLI history

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall handleupdown in clitelnet.c. This affects only applications that enab...

CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

CVE-2026-57164 PJSIP: Heap overflow in the HTTP client

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

Stack Buffer Overflow

pjproject, edge is vulnerable to stack buffer overflow. The vulnerability exists because pjsip users that use STUN in their applications, either by: setting a STUN server in their account/media config in pjsua/pjsua2 level, or directly using pjlib-util/stunsimple api...

CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

CVE-2017-16875

CVE-2017-16875 affects Teluu pjproject (PJLIB/PJLIB-UTIL) in PJSIP prior to 2.7.1. The ioqueue component may perform a double key unregistration after a crafted socket sequence, triggering an integer overflow that can cause ioqueue backends to reject future key registrations. Affected software is...

CVE-2017-16872

CVE-2017-16872 affects Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The issue arises when parsing numeric SIP header fields (e.g., CSeq, ttl, port); values can overflow and may be captured incorrectly or cause a buffer overrun if converted back to strings, enabling a potential ex...

PJSIP Teluu pjproject pjlib and pjlib-util Integer Overflow Vulnerability

PJSIP is an open source, free multimedia communication library written in C. Teluu pjproject pjlib is one of the small framework libraries; pjlib-util is one of the auxiliary tool libraries . An integer overflow vulnerability exists in Teluu pjproject pjlib and pjlib-util in versions of PJSIP pri...

PJSIP Teluu pjproject pjlib and pjlib-util Buffer Overflow Vulnerability

PJSIP is an open source, free multimedia communication library written in C. Teluu pjproject pjlib is one of the small framework libraries; pjlib-util is one of the auxiliary tool libraries . An integer overflow vulnerability exists in Teluu pjproject pjlib and pjlib-util in versions of PJSIP pri...