These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end of the PJSIP library when rendering feedback for an entered command line. This affects applications that enable the telnet CLI front-end. The impact beyond existing access is limited because reaching this code already requires access to the unauthenticated CLI. The vulnerability is caused by insufficient bounds checking, allowing an att [truncated]
A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end of the PJSIP library, which can lead to application termination. This affects applications that enable the telnet CLI front-end. The issue has been patched via commit 628b716. The vulnerability is triggered when redrawing the command line during history recall, potentially leading to application termination. Defenders should assess expo [truncated]
A heap buffer overflow exists in the PJLIB-UTIL HTTP client when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once. The vulnerability can lead to unexpected application termination or memory corruption. Defenders should assess exposure and prioritize patching or mitigation, especially for applications that consume the re [truncated]
A stack buffer overflow vulnerability exists in the GnuTLS TLS backend of PJSIP, a free and open-source multimedia communication library. The issue arises when parsing the Subject Alternative Name extension of a peer certificate. This can be triggered by a network-positioned attacker presenting a crafted certificate during the TLS handshake, before any SIP-level authentication. The impact may range from u [truncated]
A stack buffer overflow vulnerability exists in the SRTP/SDES media transport of PJSIP, a free and open-source multimedia communication library written in C, when processing a=crypto attributes during SDP offer/answer. This affects applications with SRTP enabled. The issue has been patched via commit a1b707c. Defenders responsible for PJSIP-based applications, particularly those using SRTP, should assess [truncated]
A stack buffer overflow vulnerability exists in PJSUA when processing Service-Route headers in a registration response. This affects applications that register using the PJSUA/PJSUA2 account API. A registrar returning an excessive number of Service-Route headers can write past the end of the array on the stack, likely causing unexpected application termination (denial of service).
A buffer overflow vulnerability exists in the pjsip_generic_array_hdr_print() function of the PJSIP library, which can occur when serializing generic array headers. This issue is reachable in applications that parse and re-serialize incoming SIP requests, such as proxies, SBCs, or B2BUAs, where a remote peer can influence the serialized message. The vulnerability is caused by a buffer overflow that can wr [truncated]
A remote out-of-bounds read and write vulnerability exists in the SDP negotiator of PJSIP, a free and open-source multimedia communication library, when the remote payload-type map maintenance feature is enabled. This can lead to memory corruption and denial of service. The vulnerability is patched in commit 673b978. Defenders should verify exposure in PJSIP integrations, especially those with the feature [truncated]
A heap out-of-bounds read vulnerability exists in PJSIP's VP9 RTP unpacketizer prior to version 2.17. This issue occurs when parsing crafted VP9 Scalability Structure (SS) data. Insufficient bounds checking on the payload descriptor length may cause reads beyond the allocated RTP payload buffer. The CVE record was published on 2026-03-31T16:16:32.767Z and has not been modified since then. Users of PJSIP v [truncated]