Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🛡️ Vulnerabilidades críticas no Asterisk (CVE-2025-65102, CVE-2026-25994, CVE-2026-26203) foram corrigidas no Debian 11. Saiba mais: -> http://tinyurl.com/3jv6bamn #Debian https://t.co/zqs5JVpber
Post summary
Debian 11 has patched three critical Asterisk CVEs (CVE-2025-65102, CVE-2026-25994, CVE-2026-26203) and no PoC, exploit, or active exploitation details were provided.
🚨 CVE-2026-26203: Malformed H.264 video sent over the network can trigger a heap buffer underflow in PJSIP, causing crashes or code execution in VoIP apps. Upgrade to 2.17 ASAP. Full advisory ➡️ https://volerion.com/vulnerabilities/CVE-2026-26203 #PJSIP #VoIP #infosec
Post summary
A vulnerability (CVE-2026-26203) causing a heap buffer underflow in PJSIP via malformed H.264 video is highlighted, and users are urged to upgrade to version 2.17 to mitigate the risk.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pjsip | pjsip | - | - | - |