Stack Buffer Overflow in PJSIP Multimedia Communication Library
CVE-2026-29068

8.7HIGH

Key Information:

Vendor

Pjsip

Status
Pjproject
Vendor
CVE Published:
6 March 2026

What is CVE-2026-29068?

A stack buffer overflow vulnerability exists in the PJSIP multimedia communication library prior to version 2.17. This issue arises when the pjmedia codec component processes an RTP payload, which may contain more frames than the allocated buffer can accommodate. This flaw can lead to potential crashes or exploitation of the affected application. Users should update to version 2.17 or later to mitigate this risk. For more detailed information, please refer to the security advisory and GitHub commit linked in the references.

Affected Version(s)

pjproject < 2.17

References

https://github.com/pjsip/pjproject/security/advisories/GH...
x_refsource_CONFIRM
https://github.com/pjsip/pjproject/commit/6c9024511bf5307...
x_refsource_MISC

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.