Buffer Overflow Vulnerability in PJSIP Communication Library

CVE-2026-57160

What is CVE-2026-57160?

A buffer overflow vulnerability exists in the PJSIP multimedia communication library, specifically in the pjsip_generic_array_hdr_print() function within the SIP message handling code. This function is responsible for serializing headers in SIP requests. Due to insufficient boundary checks, there's a potential for writing past the end of allocated buffers under certain conditions. This could be exploited in applications parsing SIP requests, such as proxies or session border controllers, potentially leading to unintended behavior. While code execution and information disclosure have not been demonstrated, the issue highlights the need for timely updates to maintain application integrity. A patch has been released to address this vulnerability.

References