Lucene search
+L

7 matches found

NVD
NVD
•added 2026/04/21 9:16 p.m.•27 views

CVE-2026-40892

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

9.8CVSS0.00419EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/21 7:55 p.m.•38 views

CVE-2026-40892

CVE-2026-40892 (PJSIP) : A stack buffer overflow exists in pjsip_auth_create_digest2() for 2.16 and earlier when using pre-computed digest credentials (PJSIP_CRED_DATA_DIGEST). The function copies cred_info->data.slen without an upper-bound check, which can overflow the fixed-size ha1 buffer (...

9.8CVSS6.2AI score0.00419EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/04/21 7:55 p.m.•15 views

CVE-2026-40892 PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

9.3CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/21 7:55 p.m.•53 views

CVE-2026-40892 PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

9.3CVSS0.00419EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/04/21 7:55 p.m.•27 views

CVE-2026-40892

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2 in PJSIP when using pre-computed digest credentials PJSIPCREDDATADIGEST. The function copies credential data using credinfo-data.slen as the...

9.8CVSS6.2AI score0.00419EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/21 12:00 a.m.•19 views

PT-2026-34170

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.16 and earlier Description A stack buffer overflow occurs in the pjsip auth create digest2 function when using pre-computed digest credentials PJSIP CRED DATA DIGEST. The function copies credential data using the cred...

9.8CVSS6.1AI score0.00419EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2026/04/21 12:00 a.m.•26 views

PJSIP security vulnerabilities

PJSIP is an open-source, free and open-source multimedia communication library developed in C language. It implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP versions 2.16 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the...

9.8CVSS6.1AI score0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder