Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-11 | 2 | Disclosure1Patch1 |
| 2026-06-17 | 1 | Patch1 |
🛡️ Vulnerabilidades críticas no Asterisk (CVE-2025-65102, CVE-2026-25994, CVE-2026-26203) foram corrigidas no Debian 11. Saiba mais: -> http://tinyurl.com/3jv6bamn #Debian https://t.co/zqs5JVpber
Post summary
The tweet informs that critical Asterisk CVEs were patched in Debian 11, linking to the relevant advisory.
CVE-2026-25994 PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when … https://www.cve.org/CVERecord?id=CVE-2026-25994
Post summary
A buffer overflow exists in PJSIP 2.16 and earlier (CVE‑2026‑25994), affecting the PJNATH ICE Session; no exploitation, PoC, or patch details are provided.
🚨 CVE-2026-25994: PJSIP up to 2.16 mishandles long ICE usernames, triggering a buffer overflow that can lead to remote code execution without authentication. Upgrade to 2.17 ASAP. Full advisory ➡️ https://volerion.com/vulnerabilities/CVE-2026-25994 #VoIP #infosec #AppSec
Post summary
A buffer overflow in PJSIP versions up to 2.16 can allow unauthenticated remote code execution via long ICE usernames. Users are urged to upgrade to version 2.17 immediately, as detailed in the advisory.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pjsip | pjsip | - | - | - |