PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the `master` branch. There are no known workarounds.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| teluu | pjsip | 2.11.1 | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
19
Affected Products
19
References
teluu / pjsip
| - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| asterisk | certified_asterisk | - | - |
| sangoma | asterisk | 16.0.0 - 16.24.1 | - |
| sangoma | asterisk | 18.0.0 - 18.10.1 | - |
| sangoma | asterisk | 19.0.0 - 19.2.1 | - |
| debian | debian_linux | - | - |
| debian | debian_linux | - | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploitability
Impact