pjsip records
15 published records for vendor pjsip.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 93.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-122 Heap-based Buffer Overflow4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-416 Use After Free3
- CWE-121 Stack-based Buffer Overflow2
- CWE-125 Out-of-bounds Read2
- CWE-118 Incorrect Access of Indexable Resource ('Range Error')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
15 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2022-24786No exploit | Potential out-of-bound read/write in PJSIPpjsip · pjsip · CWE-125 | Critical9.8 | — | 2.1% | Apr 6, 2022 |
40Plan | CVE-2015-2003No exploit | The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method pjsip · pjsua2 sdk · CWE-118 | Critical9.8 | — | 2.0% | Mar 29, 2018 |
39Monitor | CVE-2022-39244No exploit | Buffer overflow in pjlib scanner and pjmediapjsip · pjsip · CWE-120 | Critical9.8 | — | 1.2% | Oct 6, 2022 |
39Monitor | CVE-2022-23547No exploit | Heap buffer overflow in pjproject when decoding STUN messagepjsip · pjsip · CWE-122 | Critical9.8 | — | 0.9% | Dec 23, 2022 |
34Monitor | CVE-2026-29068No exploit | PJSIP: Stack buffer overflow in Opus codec parserpjsip · pjsip · CWE-121 | High8.7 | — | 0.5% | Mar 6, 2026 |
34Monitor | CVE-2026-28799No exploit | PJSIP: Heap use-after-free in PJSIP presence subscription termination handlerpjsip · pjsip · CWE-416 | High8.7 | — | 0.5% | Mar 6, 2026 |
34Monitor | CVE-2026-40614No exploit | PJSIP: Heap buffer overflow in Opus codec decodingpjsip · pjsip · CWE-122 | High8.5 | — | 0.4% | Apr 21, 2026 |
33Monitor | CVE-2026-25994Proof of concept | PJSIP has a heap buffer overflow in ICE with long usernamepjsip · pjsip · CWE-120 | High8.1 | — | 2.0% | Feb 11, 2026 |
33Monitor | CVE-2026-32945Proof of concept | PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parserpjsip · pjsip · CWE-122 | High8.4 | — | 0.5% | Mar 20, 2026 |
32Monitor | CVE-2026-40892No exploit | PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()pjsip · pjsip · CWE-121 | High8.1 | — | 0.6% | Apr 21, 2026 |
32Monitor | CVE-2026-32942No exploit | PJSIP has ICE session use-after-free race conditionspjsip · pjsip · CWE-416 | High8.0 | — | 0.6% | Mar 20, 2026 |
32Monitor | CVE-2026-26967No exploit | PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizerpjsip · pjsip · CWE-122 | High8.1 | — | 0.4% | Feb 19, 2026 |
31Monitor | CVE-2022-24793No exploit | Potential heap buffer overflow when parsing DNS packets in PJSIPpjsip · pjsip · CWE-120 | High7.5 | — | 2.2% | Apr 6, 2022 |
27Monitor | CVE-2026-33069No exploit | PJSIP has an Out-of-bounds Read in SIP multipart parsingpjsip · pjsip · CWE-125 | Medium6.9 | — | 0.4% | Mar 20, 2026 |
20Monitor | CVE-2026-26203No exploit | PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NALpjsip · pjsip · CWE-416 | Medium5.1 | — | 0.2% | Feb 19, 2026 |
- CVE-2022-2478640Plan
Potential out-of-bound read/write in PJSIP
CriticalCVSS 9.8No exploitEPSS 2%pjsip · pjsipApr 6, 2022
- CVE-2015-200340Plan
The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method
CriticalCVSS 9.8No exploitEPSS 2%pjsip · pjsua2 sdkMar 29, 2018
- CVE-2022-3924439Monitor
Buffer overflow in pjlib scanner and pjmedia
CriticalCVSS 9.8No exploitEPSS 1%pjsip · pjsipOct 6, 2022
- CVE-2022-2354739Monitor
Heap buffer overflow in pjproject when decoding STUN message
CriticalCVSS 9.8No exploitEPSS 1%pjsip · pjsipDec 23, 2022
- CVE-2026-2906834Monitor
PJSIP: Stack buffer overflow in Opus codec parser
HighCVSS 8.7No exploitEPSS 1%pjsip · pjsipMar 6, 2026
- CVE-2026-2879934Monitor
PJSIP: Heap use-after-free in PJSIP presence subscription termination handler
HighCVSS 8.7No exploitEPSS 0%pjsip · pjsipMar 6, 2026
- CVE-2026-4061434Monitor
PJSIP: Heap buffer overflow in Opus codec decoding
HighCVSS 8.5No exploitEPSS 0%pjsip · pjsipApr 21, 2026
- CVE-2026-2599433Monitor
PJSIP has a heap buffer overflow in ICE with long username
HighCVSS 8.1Proof of conceptEPSS 2%pjsip · pjsipFeb 11, 2026
- CVE-2026-3294533Monitor
PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser
HighCVSS 8.4Proof of conceptEPSS 1%pjsip · pjsipMar 20, 2026
- CVE-2026-4089232Monitor
PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()
HighCVSS 8.1No exploitEPSS 1%pjsip · pjsipApr 21, 2026
- CVE-2026-3294232Monitor
PJSIP has ICE session use-after-free race conditions
HighCVSS 8.0No exploitEPSS 1%pjsip · pjsipMar 20, 2026
- CVE-2026-2696732Monitor
PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer
HighCVSS 8.1No exploitEPSS 0%pjsip · pjsipFeb 19, 2026
- CVE-2022-2479331Monitor
Potential heap buffer overflow when parsing DNS packets in PJSIP
HighCVSS 7.5No exploitEPSS 2%pjsip · pjsipApr 6, 2022
- CVE-2026-3306927Monitor
PJSIP has an Out-of-bounds Read in SIP multipart parsing
MediumCVSS 6.9No exploitEPSS 0%pjsip · pjsipMar 20, 2026
- CVE-2026-2620320Monitor
PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL
MediumCVSS 5.1No exploitEPSS 0%pjsip · pjsipFeb 19, 2026