PT-2026-20971 · Pjsip · Pjsip

Arthurscchan · Published 2026-02-20 · Updated 2026-02-20 · CVE-2026-26967

Positive Technologies (AI Summary)

CVSS v4.0

8.1

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.16 and below

Description PJSIP, a multimedia communication library written in C, contains a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer. The issue arises when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL unit size field without verifying that both bytes are within the payload buffer boundaries. This affects applications receiving video using H.264. The vulnerability allows remote attackers to potentially crash applications or execute code without authentication.

Recommendations Upgrade to version 2.17 or later.

Exploit

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-26967

GHSA-X2HC-6969-G8V6

Affected Products

Pjsip

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26967.json · Exploit
• https://github.com/pjsip/pjproject/commit/f821c214e52b11bae11e4cd3c7f0864538fb5491 · Patch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-x2hc-6969-g8v6 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-26967 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-26967 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-26967 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-26967 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26967 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26967 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-26967 · Vendor Advisory
• https://github.com/pjsip/pjproject · Note
• https://t.me/CVEtracker/45220 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2024724918357590451 · Twitter Post
• https://twitter.com/VolerionSec/status/2024660057770631505 · Twitter Post
• https://t.me/cveNotify/152550 · Telegram Post