PT-2026-35058 · Pjsip · Pjsip

Dhkts1 · CVE-2026-41415 · Published 2026-04-24 · Updated 2026-04-28

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.17

Description An out-of-bounds read occurs when parsing a malformed Content-ID URI in a SIP multipart message body. This is caused by insufficient length validation, which allows reads to extend beyond the intended buffer bounds.

Recommendations Update to version 2.17.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-41415

GHSA-935M-FMF5-J4PM

Affected Products

Pjsip

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41415.json · Exploit
• https://github.com/pjsip/pjproject/security/advisories/GHSA-935m-fmf5-j4pm · Vendor Advisory
• https://github.com/pjsip/pjproject/commit/4225a93c16661538005017883fbc8f1ea1d5f4b0 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-41415 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-41415 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-41415 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41415 · Security Note
• https://ubuntu.com/security/CVE-2026-41415 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-41415 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-41415 · Security Note
• https://twitter.com/VulmonFeeds/status/2047892612099531238 · Twitter Post
• https://twitter.com/CVEnew/status/2047798576269709706 · Twitter Post