PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL
Résumé
PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL
Description d'origine
La description telle que publiée par la source (souvent en anglais).
PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2026-26203 pjproject Corrigé dans: 2.17-r0
- Debian DEBIAN-CVE-2026-26203 asterisk
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com