CVE-2026-28799

creationtimestamp| type| source ---|---|--- 2026-03-06 07:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgetcdbnqw2z 2026-05-06 14:30:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2wjym52c...

CVE-2026-28799

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription framework evsub.c that is triggered during presence unsubscription SUBSCRIBE with Expires=0. This issue has been patched i...