Out-of-bounds read in pjsip - #VU156287
Published: October 21, 2026
Vulnerability identifier: #VU156287
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service by crashing an application that renders incoming video.
The vulnerability exists due to failure to resize the frame buffer in the PJMEDIA video port when processing a video source format change that increases the frame size. A remote attacker can increase the resolution of transmitted video to make the converter read beyond the existing frame buffer and potentially crash the application.
pjsua and PJSUA2 are not affected in their default configuration because they connect renderers through a passive video port.
Affected software
pjsip
Remediation
Install security update from vendor's website.
pjsip - update to 2.18