Stack Buffer Overflow Vulnerability in PJSIP Multimedia Communication Library

CVE-2026-57166

What is CVE-2026-57166?

The PJSIP multimedia communication library contains a stack buffer overflow vulnerability in its telnet CLI front-end. This issue arises when rendering command line feedback due to insufficient bounds checking on fixed-size buffers. By entering a long or malformed command line, an attacker could influence the amount of data written to these buffers, potentially leading to application termination. Applications that utilize this unauthenticated telnet CLI interface are particularly susceptible, as any client with access can issue arbitrary commands. However, the impact is limited to those capable of accessing the CLI, and applications without the telnet CLI enabled remain unaffected. A fix has been implemented to address this vulnerability.

References