pion vulnerabilities

7 published CVEs name pion among the affected products.

Critical 0High 2Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-54909
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute
pion · stun
Medium5.3
CVE-2026-54908
Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
pion · dtls
Medium6.3
CVE-2026-26014
Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key
pion · dtls
Medium5.9
CVE-2025-49140
Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)
pion · interceptor
High7.5
CVE-2022-29222
Improper Certificate Validation in Pion DTLS
pion · dtls
Medium5.9
CVE-2022-29189
Buffer for inbound DTLS fragments has no limit
pion · dtls
Medium5.3
CVE-2022-29190
Header reconstruction method can be thrown into an infinite loop in Pion DTLS
pion · dtls
High7.5