VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Feb 19, 2026· Updated Jun 17, 2026

CVE-2026-26203

CVE-2026-26203

Description

PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Pjsip/Pjsipllm-fuzzy2 versions
    <2.17+ 1 more
    • (no CPE)range: <2.17
    • cpe:2.3:a:pjsip:pjsip:*:*:*:*:*:*:*:*range: <2.17
  • Pjsip/Pjprojectllm-fuzzy
    Range: <2.17
  • pjsip/pjmedia-videov5
    Range: < 2.17

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.