Stack Buffer Overflow in PJSIP's Telnet CLI Front-End

CVE-2026-57165

What is CVE-2026-57165?

A stack buffer overflow vulnerability exists in the telnet CLI front-end of the PJSIP multimedia communication library. When users recall command history via the handle_up_down() function, a sequence of line-redraw operations can result in an excess of data being processed, exceeding the fixed size of the stack buffer. This issue primarily affects applications that have enabled the telnet CLI, allowing potential application termination. It is essential to note that exploitation requires access to the unauthenticated telnet CLI, which already permits arbitrary command execution. Applications not using the telnet CLI front-end are not impacted. A patch has been issued in commit 628b716.

References