CVE-2026-57163
PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate (tls_cert_get_info() in ssl_sock_gtls.c). Only GnuTLS builds are affected (--with-gnutls); OpenSSL and Apple SecureTransport/Network.framework builds are not affected. While extracting certificate information after a TLS handshake, an incorrect buffer-size value can cause an oversized SubjectAltName entry to be written past the end of a fixed-size stack buffer. A network-positioned attacker presenting a crafted certificate — a malicious server to a connecting client, or a malicious client to a server that requests certificates — can trigger this during the TLS handshake, before any SIP-level authentication. Impact may range from unexpected application termination to control flow hijack/memory corruption. This issue has been patched via commit c4a151a.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.25%
- CWE
- CWE-121
- Published
- 2026-09-04
- Last modified
- 2026-09-04
Affected products
- pjsip pjproject
Weakness type
Related vulnerabilities
- CVE-2026-85384 — Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
- CVE-2026-83990 — Microsoft Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-81953 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-81388 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-81396 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-73006 — DirectWrite Remote Code Execution Vulnerability
- CVE-2026-69614 — Microsoft Office Access Remote Code Execution Vulnerability
- CVE-2026-69510 — Windows DHCP Server Remote Code Execution Vulnerability