Pjsip · Pjsip · CVE-2022-24764
**Name of the Vulnerable Software and Affected Versions**
PJSIP versions 2.12 and prior
**Description**
The issue is related to a stack buffer overflow vulnerability in the PJSIP multimedia communication library, specifically affecting users of PJSUA2 or those who call the API endpoints `pjmedia sdp print()` and `pjmedia sdp media print()`. This vulnerability can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. Applications not using PJSUA2 and not directly calling `pjmedia sdp print()` or `pjmedia sdp media print()` are not affected.
**Recommendations**
For PJSIP versions 2.12 and prior, a patch is available on the `master` branch of the `pjsip/pjproject` GitHub repository.
As a temporary workaround, consider disabling the `pjmedia sdp print()` and `pjmedia sdp media print()` functions until a patch is applied.
Restrict access to the PJSUA2 API to minimize the risk of exploitation.