← Database

CVE-2022-24764

HIGH CVSS: 7.5 Published: 2022-03-22 Modified: 2026-06-17

Description

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API `pjmedia_sdp_print(), pjmedia_sdp_media_print()`. Applications that do not use PJSUA2 and do not directly call `pjmedia_sdp_print()` or `pjmedia_sdp_media_print()` should not be affected. A patch is available on the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.

Affected Platforms

Debian Debian LinuxTeluu Pjsip

Weakness Type

CWE-120, CWE-121, CWE-787

References