CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C.

Pjsip

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect…

4. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-57163
• GitHub
  https://github.com/pjsip/pjproject/security/advisories/GHSA-jm2j-6rg6-qvwx