CVE-2026-57164

CVE-2026-57164 affects PJSIP , a free and open source multimedia communication library written in C. A heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. When growing the response buffer, an incorrect size calculation based on the serve...

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57163

CVE-2026-57163 is a stack buffer overflow in PJSIP's GnuTLS TLS backend , specifically in tls_cert_get_info() in ssl_sock_gtls.c, when parsing the Subject Alternative Name (SAN) extension of a peer certificate. An incorrect buffer-size value causes an oversized SAN entry to be written past a fixe...

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57162

CVE-2026-57162 is a stack buffer overflow in PJSIP 's SRTP/SDES media transport, specifically in sdes_encode_sdp() in transport_srtp_sdes.c. During SDP offer/answer negotiation, a=crypto attributes from a remote peer are collected into a fixed-size array without bounding their count. A remote att...

CVE-2026-57162 PJSIP: Stack overflow parsing SDP a=crypto attributes

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162 PJSIP: Stack overflow parsing SDP a=crypto attributes

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57161

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

CVE-2026-57161 PJSIP: Stack overflow handling Service-Route headers in a registration response

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

CVE-2026-57161 PJSIP: Stack overflow handling Service-Route headers in a registration response

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

EUVD-2026-71655

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

CVE-2026-57161 PJSIP: Stack overflow handling Service-Route headers in a registration response

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

CVE-2026-57161

PJSIP , an open-source multimedia communication library written in C, contains a stack buffer overflow in PJSUA's update_service_route() function (pjsua_acc.c). When processing a 2xx response to a REGISTER request, Service-Route URIs are stored into a fixed-size array without bounding the number ...

CVE-2026-57160 PJSIP: SIP message header buffer overflow

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

CVE-2026-57160

PJSIP , an open-source multimedia communication library written in C, contains a buffer overflow in pjsip_generic_array_hdr_print() (in pjsip/src/pjsip/sip_msg.c), the function responsible for serializing generic array headers such as Allow, Require, Supported, and Unsupported. Under certain outp...

CVE-2026-57160

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

CVE-2026-57160 PJSIP: SIP message header buffer overflow

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

CVE-2026-57159

PJSIP is an open-source multimedia communication library in C. Prior to commit 673b978 , a crafted remote SDP offer or answer can trigger an out-of-bounds read and write in assign_pt_and_update_map() within pjmedia/src/pjmedia/sdp_neg.c, which indexes fixed-size internal tables using payload-type...