High severity7.5NVD Advisory· Published Oct 6, 2022· Updated Jun 17, 2026
CVE-2022-39244
CVE-2022-39244
Description
PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser are affeced by a buffer overflow vulnerability. Users connecting to untrusted clients are at risk. This issue has been patched and is available as commit c4d3498 in the master branch and will be included in releases 2.13 and later. Users are advised to upgrade. There are no known workarounds for this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
7- github.com/pjsip/pjproject/commit/c4d34984ec92b3d5252a7d5cddd85a1d3a8001aenvdPatchThird Party Advisory
- github.com/pjsip/pjproject/security/advisories/GHSA-fq45-m3f7-3mhjnvdThird Party Advisory
- security.gentoo.org/glsa/202210-37nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2023/02/msg00029.htmlnvd
- lists.debian.org/debian-lts-announce/2023/08/msg00038.htmlnvd
- lists.debian.org/debian-lts-announce/2024/09/msg00030.htmlnvd
- www.debian.org/security/2023/dsa-5358nvd
News mentions
0No linked articles in our index yet.