high7.5
CVE-2026-29068
PJSIP is a free and open source multimedia communication library written in C.
Impact
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pjsip | Pjsip | before 2.17 |