critical9.8Public exploit code
CVE-2026-25994
PJSIP is a free and open source multimedia communication library written in C.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PJPROJECT 2.16 - Heap Bufferoverflow2026-05-14 · webapps · multiple
Impact
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pjsip | Pjsip | through 2.16 |