ID:12597 - Exploit for Stack-based buffer overflow in pjsip - CVE-2026-25994

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to cause a denial of service or execute arbitrary code.

The vulnerability exists due to stack-based buffer overflow in PJNATH ICE Session when processing credentials with excessively long usernames. A remote attacker can send crafted credentials with an excessively long username to cause a denial of service or execute arbitrary code.

This issue affects applications that use ICE.

Remediation