Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_parse(). After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This allows 1-2 bytes of adjacent heap memory to be read. All applications that process incoming SIP messages with multipart bodies or SDP content are potentially affected. This issue is resolved in version 2.17.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-20 | 3 | Disclosure2Patch1 |
| 2026-03-22 | 1 | Disclosure1 |
🚨 CVE-2026-33069: Unauthenticated SIP message can trigger an out-of-bounds heap read in PJSIP ≤2.16, leaking adjacent memory. Upgrade to 2.17 now! Full advisory ➡️ https://volerion.com/vulnerabilities/CVE-2026-33069 #PJSIP #VoIP #infosec
Post summary
The advisory alerts that CVE-2026-33069 causes an out‑of‑bounds heap read in PJSIP versions 2.16 and earlier; patching to 2.17 removes the vulnerability.
CVE-2026-33069 PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_par… https://www.cve.org/CVERecord?id=CVE-2026-33069
Post summary
The post discloses CVE‑2026‑33069 in PJSIP, describing an out‑of‑bounds heap read in specific versions, but gives no PoC, exploit, patch, or report of active exploitation.
CVE-2026-33069 PJSIP Heap Out-of-Bounds Read Vulnerability in Versions 2.16 and Below https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33069
Post summary
The post announces CVE-2026-33069 as a heap out-of-bounds read vulnerability in PJSIP 2.16 and earlier, without providing PoC, exploit, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-33069 - PJSIP has an Out-of-bounds Read in SIP multipart parsing Intel Report: https://ift.tt/njrVDKB
Post summary
The alert discloses a new CVE (CVE-2026-33069) in PJSIP, detailing an out-of-bounds read during SIP multipart parsing, without providing PoC, exploit, or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pjsip | pjsip | - | - | - |