CyberRota Analysis
AI-GeneratedThe vulnerability affects the PJSIP multimedia communication library, specifically in the `pjsip_generic_array_hdr_print()` function, which can lead to a buffer overflow under certain conditions when serializing generic array headers. This may allow a remote peer to influence the serialized message in applications that parse SIP requests, such as proxies or session border controllers. Organizations using PJSIP in their communication infrastructure should prioritize applying the patch to mitigate potential risks associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.
Related CVEs
Other vulnerabilities affecting the same vendor(s)