๐Ÿ” CVE Alert

CVE-2026-29068

UNKNOWN 0.0

PJSIP: Stack buffer overflow in Opus codec parser

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17.

CWE CWE-121
Vendor pjsip
Product pjproject
Published Mar 6, 2026
Last Updated Mar 9, 2026
Stay Ahead of the Next One

Get instant alerts for pjsip pjproject

Be the first to know when new unknown vulnerabilities affecting pjsip pjproject are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

pjsip / pjproject
< 2.17

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/pjsip/pjproject/security/advisories/GHSA-pqww-jrxr-457f github.com: https://github.com/pjsip/pjproject/commit/6c9024511bf5307ff72efde1f90c9a2a226d8967