CVE-2026-77396

PJSIP is a free and open source multimedia communication library written in C.

Pjsip

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity is derived from the declared media dimensions. A crafted AVI file can therefore cause an attacker-controlled out-of-bounds write past the heap allocation when an application plays the file or pulls its frames. The…

18. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-77396
• GitHub
  https://github.com/pjsip/pjproject/security/advisories/GHSA-6p2p-5wf8-h5hr