pion records
5 published records for vendor pion.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-287 Improper Authentication1
- CWE-295 Improper Certificate Validation1
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-20786No exploit | handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to pion · dtls · CWE-287 | Critical9.8 | — | 3.0% | Apr 19, 2020 |
31Monitor | CVE-2022-29190No exploit | Header reconstruction method can be thrown into an infinite loop in Pion DTLSpion · dtls · CWE-835 | High7.5 | — | 1.7% | May 20, 2022 |
30Monitor | CVE-2022-29222No exploit | Improper Certificate Validation in Pion DTLSpion · dtls · CWE-295 | High7.5 | — | 0.8% | May 20, 2022 |
23Monitor | CVE-2026-26014No exploit | Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication keypion · dtls · CWE-200 | Medium5.9 | — | 0.7% | Feb 11, 2026 |
22Monitor | CVE-2022-29189No exploit | Buffer for inbound DTLS fragments has no limitpion · dtls · CWE-120 | Medium5.3 | — | 2.1% | May 20, 2022 |
- CVE-2019-2078640Plan
handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to
CriticalCVSS 9.8No exploitEPSS 3%pion · dtlsApr 19, 2020
- CVE-2022-2919031Monitor
Header reconstruction method can be thrown into an infinite loop in Pion DTLS
HighCVSS 7.5No exploitEPSS 1%pion · dtlsMay 20, 2022
- CVE-2022-2922230Monitor
Improper Certificate Validation in Pion DTLS
HighCVSS 7.5No exploitEPSS 0%pion · dtlsMay 20, 2022
- CVE-2026-2601423Monitor
Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key
MediumCVSS 5.9No exploitEPSS 0%pion · dtlsFeb 11, 2026
- CVE-2022-2918922Monitor
Buffer for inbound DTLS fragments has no limit
MediumCVSS 5.3No exploitEPSS 2%pion · dtlsMay 20, 2022