PT-2025-47808 · Pjsip · Pjsip

Published 2025-11-21 · Updated 2025-11-22 · CVE-2025-65102

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.16

Description PJSIP is a multimedia communication library. Versions before 2.16 may experience a memory overwrite issue when using the Opus audio codec in receiving direction. This occurs because Opus PLC may zero-fill the input frame while the input frame length, based on stream ptime, is less than the decoder ptime. This can lead to unexpected application termination.

Recommendations Update to version 2.16 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-65102

GHSA-W5VR-39X7-H8G5

Affected Products

Pjsip

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65102.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-65102 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-65102 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65102 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-65102 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-65102 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-65102 · Security Note
• https://ubuntu.com/security/CVE-2025-65102 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-65102 · Vendor Advisory
• https://github.com/pjsip/pjproject/security/advisories/GHSA-w5vr-39x7-h8g5 · Note
• https://github.com/pjsip/pjproject/commit/6e9bd2e7d25bba26f852771b40693f45da14fa8f · Note
• https://twitter.com/CVEnew/status/1991987614950244798 · Twitter Post
• https://t.me/CVEtracker/37982 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1992077761188413701 · Twitter Post
• https://security.alpinelinux.org/vuln/CVE-2025-65102 · Note