Vendor
Pjsip
49 known vulnerabilities in products by Pjsip, 0 of them actively exploited (CISA KEV).
Key figures
49
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
21
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-25994 | PJSIP has a heap buffer overflow in ICE with long username | 9.8 | |
| Critical | CVE-2022-21723 | Out-of-bounds read in multipart parsing in PJSIP | 9.1 | |
| Critical | CVE-2022-23608 | Use after free in PJSIP | 8.1 | |
| Critical | CVE-2021-43845 | Prevent out-of-bounds read in PJSIP | 8.2 | |
| Critical | CVE-2021-37706 | Potential integer underflow upon receiving STUN message in PJSIP | 7.3 | |
| Critical | CVE-2022-31031 | Potential stack buffer overflow when parsing message as a STUN client | 9.8 | |
| Critical | CVE-2022-24786 | Potential out-of-bound read/write in PJSIP | 9.8 | |
| Critical | CVE-2022-21722 | Potential out-of-bound read during RTP/RTCP parsing in PJSIP | 9.1 | |
| Critical | CVE-2015-2003 | Pjsip Pjsua2 SDK: Code Execution | 9.8 | |
| Critical | CVE-2023-38703 | PJSIP has use-after-free vulnerability in SRTP media transport | 9.8 | |
| Critical | CVE-2022-24754 | Buffer overflow in pjsip | 8.5 | |
| High | CVE-2023-27585 | Pjsip Pjproject: Heap-based Buffer Overflow | 7.5 | |
| High | CVE-2022-24764 | Stack buffer overflow in pjproject | 7.5 | |
| High | CVE-2022-24793 | Potential heap buffer overflow when parsing DNS packets in PJSIP | 7.5 | |
| High | CVE-2021-43804 | Out-of-bounds read when parsing RTCP BYE message in PJSIP | 7.3 | |
| Critical | CVE-2026-57162 | PJSIP: Stack overflow parsing SDP a=crypto attributes | 9.1 | |
| High | CVE-2022-24763 | Infinite Loop in PJSIP | 7.5 | |
| High | CVE-2022-24792 | Potential infinite loop when parsing WAV format file in PJSIP | 7.5 | |
| High | CVE-2026-57159 | PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance | 7.5 | |
| Medium | CVE-2021-21375 | Crash in receiving updated SDP answer after initial SDP negotiation failed | 6.5 | |
| Critical | CVE-2022-39244 | Buffer overflow in pjlib scanner and pjmedia | 7.5 | |
| High | CVE-2026-57161 | PJSIP: Stack overflow handling Service-Route headers in a registration response | 8.2 | |
| Medium | CVE-2021-32686 | Denial of Service in PJSIP | 5.9 | |
| Critical | CVE-2026-57163 | PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend | 9.1 | |
| High | CVE-2026-57164 | PJSIP: Heap overflow in the HTTP client | 5.9 |