CVE-2026-40892

A flaw was found in PJSIP, a multimedia communication library. This vulnerability, a stack buffer overflow, occurs in the pjsipauthcreatedigest2 function when processing pre-computed digest credentials. A remote attacker could exploit this by providing specially crafted credential data, leading t...

DEBIAN-CVE-2026-40892

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...