CVE-2026-29068CWE-121

PJSIP: Stack buffer overflow in Opus codec parser

High · published March 6, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00548 · 44.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-03-06T06:36Z
EPSS history
Timeline
  • 06 MAR 06:36Z
    PJSIP: Stack buffer overflow in Opus codec parser
    cvelistv5