PJSIP: Asymmetric ptime integer overflow in Media Stream
Summary
PJSIP: Asymmetric ptime integer overflow in Media Stream
Original description
The description as published by the source.
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an integer overflow in media stream buffer size calculation when processing SDP with asymmetric ptime configuration. The overflow may result in an undersized buffer allocation, which can lead to unexpected application termination or memory corruption This vulnerability is fixed in 2.17.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-41416 asterisk
- Ubuntu UBUNTU-CVE-2026-41416 asterisk
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com