HIGH🇬🇧 English

CVE-2026-32942

CVSS 8.0v4.0pub. 2026-03-20upd. 2026-03-23

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Pjsip

    APP
    Pjsip
    < 2.17
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Race ConditionMemory
CWE
Referencje

Powiązane podatności

CVE-2022-24786CRITICAL9.8ten sam produkt

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior d...

CVE-2026-40614HIGH8.5ten sam produkt

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a...

CVE-2026-40892HIGH8.1ten sam produkt

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack bu...

CVE-2026-32945HIGH8.4ten sam produkt

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a ...

CVE-2026-28799HIGH8.7ten sam produkt

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap u...