CVE Tools

Pjsip

16 CVEs tracked since 2021. Since Dec 2021, none of them reached CISA KEV.

Pjsip CVEs per month

Dec 2021 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Pjsip CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-1230
2022-0130
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-06null or fewer
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-01null or fewer
2025-02null or fewer
2025-03null or fewer
2025-04null or fewer
2025-05null or fewer
2025-06null or fewer
2025-07null or fewer
2025-08null or fewer
2025-09null or fewer
2025-10null or fewer
2025-11null or fewer
2025-12null or fewer
2026-01null or fewer
2026-02null or fewer
2026-03null or fewer
2026-04null or fewer
2026-05null or fewer
2026-06null or fewer
2026-07null or fewer
2026-08null or fewer
2026-09100

Products

The products that kept showing up in Pjsip's monthly top three, with their CVEs summed over those months.

  1. Pjproject163 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Pjsip.

  1. CVE-2026-84975PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)7.4
  2. CVE-2026-77396PJSIP: Heap buffer overflow in the AVI parser—
  3. CVE-2026-57166PJSIP: Pre-authentication overflow in the telnet CLI error5.3
  4. CVE-2026-57165PJSIP: Pre-authentication overflow in the telnet CLI history5.3
  5. CVE-2026-57164PJSIP: Heap overflow in the HTTP client5.9
  6. CVE-2026-57163PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend9.1
  7. CVE-2026-57162PJSIP: Stack overflow parsing SDP a=crypto attributes9.1
  8. CVE-2026-57161PJSIP: Stack overflow handling Service-Route headers in a registration response8.2
  9. CVE-2026-57160PJSIP: SIP message header buffer overflow5.3
  10. CVE-2026-57159PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance7.5
  11. CVE-2026-42225GnuTLS backend silently skips certificate chain verification when verify_peer is false5.9
  12. CVE-2026-41416PJSIP: Asymmetric ptime integer overflow in Media Stream7.5
  13. CVE-2026-41415PJSIP: SIP Multipart CID URI Length Underflow9.1
  14. CVE-2026-40892PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()9.8
  15. CVE-2026-40614PJSIP: Heap buffer overflow in Opus codec decoding8.8

The record

Peak rank
#122 in Sep 2026
Busiest month shown
Sep 2026, 10 CVEs
Months with a KEV entry
0 since Dec 2021
Monthly snapshots
3 since 2021
Pjsip's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store