PJ
Product
pjproject
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 11Medium 6Low 0
Watch
Add pjproject to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40892 | 9.8 | Apr 21 | PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() Affected: <= 2.16 |
| CVE-2026-32945 | 9.8 | Mar 20 | PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser Affected: < 2.17 |
| CVE-2026-25994 | 9.8 | Feb 11 | PJSIP has a heap buffer overflow in ICE with long username Affected: <= 2.16 |
| CVE-2022-39244 | 9.8 | Oct 6 | Buffer overflow in pjlib scanner and pjmedia Affected: < 2.13 |
| CVE-2026-57163 | 9.1 | Sep 4 | PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend Affected: < c4a151af86fadd16d9480b2603eeb2abf4fb4f78 |
| CVE-2026-57162 | 9.1 | Sep 4 | PJSIP: Stack overflow parsing SDP a=crypto attributes Affected: < a1b707c0c9b0506faf2a8a438b60f11ffd6a6fd9 |
| CVE-2026-41415 | 9.1 | Apr 24 | PJSIP: SIP Multipart CID URI Length Underflow Affected: < 2.17 |
| CVE-2026-34235 | 9.1 | Mar 31 | PJSIP: Heap OOB read in VPX unpacketizer Affected: < 2.17 |
| CVE-2022-39269 | 9.1 | Oct 6 | Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip Affected: >= 2.11, < 2.13 |
Showing 9