Stack Buffer Overflow in PJSIP Affects Multimedia Communication

CVE-2026-57161

What is CVE-2026-57161?

The PJSIP multimedia communication library has a stack buffer overflow vulnerability in its PJSUA implementation. This flaw occurs specifically in the processing of Service-Route headers when receiving a registration response. The affected versions fail to adequately limit the number of Service-Route URIs stored in a fixed-size array. If a registrar sends an excessive number of headers, it can overwrite memory space on the stack, potentially resulting in denial of service due to application crashes. This risk can be inadvertently exploited through responses from malicious or compromised registrars or by spoofed messages over unprotected transmission channels. This vulnerability has been addressed in the latest commit to ensure better memory handling and protection against such attacks.

References