pjsip vulnerabilities

CVEs per yearBy the year they were published

1. 20216
2. 202215
3. 20232
4. 20251
5. 202624

Newest CVEs

• CVE-2026-84975

  PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)

  pjsip · pjproject

  High7.4
• CVE-2026-77396

  PJSIP: Heap buffer overflow in the AVI parser

  pjsip · pjproject

  Medium6.9
• CVE-2026-57166

  PJSIP: Pre-authentication overflow in the telnet CLI error

  pjsip · pjproject

  Medium6.3
• CVE-2026-57165

  PJSIP: Pre-authentication overflow in the telnet CLI history

  pjsip · pjproject

  Medium6.3
• CVE-2026-57164

  PJSIP: Heap overflow in the HTTP client

  pjsip · pjproject

  High8.3
• CVE-2026-57163

  PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend

  pjsip · pjproject

  High8.8
• CVE-2026-57162

  PJSIP: Stack overflow parsing SDP a=crypto attributes

  pjsip · pjproject

  High8.8
• CVE-2026-57161

  PJSIP: Stack overflow handling Service-Route headers in a registration response

  pjsip · pjproject

  High8.8
• CVE-2026-57160

  PJSIP: SIP message header buffer overflow

  pjsip · pjproject

  Medium6.9
• CVE-2026-57159

  PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance

  pjsip · pjproject

  High8.4