Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-26203

Опубликовано: 19 фев. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*
Версия до 2.17 (исключая)

EPSS

Процентиль: 4%
0.00017
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue.

CVSS3: 6.5
debian
около 1 месяца назад

PJSIP is a free and open source multimedia communication library. Vers ...

EPSS

Процентиль: 4%
0.00017
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416