PT-2026-29286 · Debian+3 · Asterisk+2

Sauwming · Published 2026-03-31 · Updated 2026-04-04 · CVE-2026-34235

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.17

Description A heap out-of-bounds read exists in the VP9 RTP unpacketizer when parsing crafted VP9 Scalability Structure (SS) data. This occurs due to insufficient bounds checking on the payload descriptor length, which may lead to reads beyond the allocated RTP payload buffer.

Recommendations Update to version 2.17. As a temporary workaround, disable the VP9 codec if it is not required.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-34235

Affected Products

Asterisk

Pjproject

Pjsip

References · 9

• https://github.com/pjsip/pjproject/security/advisories/GHSA-pqrm-53pc-wx28 · Vendor Advisory
• https://github.com/pjsip/pjproject/commit/f4c7d08211da1fe2ad1504434a0ad99d12aa7536 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-34235 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34235 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-34235 · Security Note
• https://ubuntu.com/security/CVE-2026-34235 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34235 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-34235 · Vendor Advisory
• https://twitter.com/zench4n/status/2040225635042521323 · Twitter Post