CVE-2022-24763
HighSummary
PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps.
Risk Assessment
This vulnerability may lead to disruption of applications using PJSIP, potentially affecting service availability within the organization.
Recommendation
It is advised to update to the latest version of PJSIP to mitigate this vulnerability. There are no known workarounds.
Other vulnerabilities in PJSIP
See all- CVE-2026-34235Critical
PJSIP before version 2.17 has a heap out-of-bounds read vulnerability in the VP9 RTP unpacketizer. Insufficient bounds checking on payload descriptor length may cause reads beyond the allocated RTP buffer.
- CVE-2022-39269Critical
PJSIP is a free and open source multimedia communication library that may incorrectly switch from using SRTP media transport to basic RTP upon SRTP restart. This leads to media being sent insecurely.
Original NVD description (English source)
PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.