Remote Out-of-Bounds Read and Write in PJSIP Multimedia Communication Library

CVE-2026-57159

What is CVE-2026-57159?

The PJSIP multimedia communication library is susceptible to a remote out-of-bounds read and write vulnerability due to inadequate bounds validation in its SDP negotiator. This issue arises when the remote payload-type map maintenance feature is enabled, which allows a crafted remote SDP to access memory outside predefined tables. While the potential impacts include memory corruption and denial of service, the extent of exploitation for code execution has not been demonstrated. This vulnerability has been addressed in commit 673b978, but environments utilizing this feature should ensure they are patched.

References