pjproject Generic Array Header sip_msg.c pjsip_generic_array_hdr_print buffer overflow

Summaryinfo

A vulnerability was found in pjproject. It has been classified as critical. Affected by this issue is the function pjsip_generic_array_hdr_print of the file pjsip/src/pjsip/sip_msg.c of the component Generic Array Header. This manipulation causes buffer overflow. This vulnerability appears as CVE-2026-57160. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in pjproject (unknown version). It has been declared as critical. Affected by this vulnerability is the function pjsip_generic_array_hdr_print of the file pjsip/src/pjsip/sip_msg.c of the component Generic Array Header. The manipulation with an unknown input leads to a buffer overflow vulnerability. The CWE definition for the vulnerability is CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. As an impact it is known to affect integrity, and availability. The summary by CVE is:

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.

It is possible to read the advisory at github.com. This vulnerability is known as CVE-2026-57160 since 06/24/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit.

Applying the patch d6a0e7f76611c3a6f530ee051e3e7a622bb1748c is able to eliminate this problem.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Project Management Software

Name

• pjproject

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion