CVE catalog

CVE-2026-26967

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. T

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 27, 2026

A flaw was found in PJSIP. A remote attacker could exploit a heap-based buffer overflow vulnerability in the H.264 unpacketizer by sending specially crafted Secure Real-time Transport Protocol (SRTP) packets. The unpacketizer fails to validate the bounds of a 2-byte Network Abstraction Layer (NAL) unit size field, which can lead to arbitrary code execution. Exploiting this vulnerability requires that an attacker can induce the processing of untrusted content. If an application accepting input from remote sources processes H.264 content with PJSIP, this vulnerability could consequently be exploited remotely. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpepjsipNot reportedNot reportedunknown
Debianasterisk140.1.11-3vulnerable
Debianasterisk140.1.11-3woody1vulnerable
Debianasterisk141:1.0.5-2vulnerable
Debianasterisk141:1.0.5-4vulnerable
Debianasterisk141:1.0.6-1vulnerable
Debianasterisk141:1.0.6-2vulnerable
Debianasterisk141:1.0.7-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge3vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge4vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge5vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge6vulnerable
Debianasterisk141:1.0.9.dfsg-1vulnerable
Debianasterisk141:1.0.9.dfsg-3vulnerable
Debianasterisk141:1.0.9.dfsg-4vulnerable
Debianasterisk141:1.0.9.dfsg-5vulnerable
Debianasterisk141:1.0.9.dfsg-6vulnerable
Debianasterisk141:1.2.0-beta1.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-2vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-3vulnerable
Debianasterisk141:1.2.0-rc1.dfsg-1vulnerable
Debianasterisk141:1.2.0-rc2.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-2vulnerable
Debianasterisk141:1.2.0.dfsg-3vulnerable
Debianasterisk141:1.2.0.dfsg-4vulnerable
Debianasterisk141:1.2.0.dfsg-5vulnerable
Debianasterisk141:1.2.0.dfsg-6vulnerable
Debianasterisk141:1.2.1.dfsg-1vulnerable
Debianasterisk141:1.2.1.dfsg-2vulnerable
Debianasterisk141:1.2.1.dfsg-3vulnerable
Debianasterisk141:1.2.10.dfsg-1vulnerable
Debianasterisk141:1.2.10.dfsg-1bpo1vulnerable
Debianasterisk141:1.2.10.dfsg-2vulnerable
Debianasterisk141:1.2.10.dfsg-3vulnerable
Debianasterisk141:1.2.11.dfsg-1vulnerable
Debianasterisk141:1.2.12.1.dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch1vulnerable
Debianasterisk141:1.2.13~dfsg-2etch2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch3vulnerable
Debianasterisk141:1.2.13~dfsg-2etch4vulnerable
Debianasterisk141:1.2.14~dfsg-1vulnerable
Debianasterisk141:1.2.14~dfsg-2vulnerable
Debianasterisk141:1.2.14~dfsg-3vulnerable
Debianasterisk141:1.2.14~dfsg-4vulnerable
Debianasterisk141:1.2.15~dfsg-1vulnerable
Debianasterisk141:1.2.16~dfsg-1vulnerable
Debianasterisk141:1.2.17~dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-2vulnerable
Debianasterisk141:1.2.4.dfsg-3vulnerable
Debianasterisk141:1.2.4.dfsg-4vulnerable
Debianasterisk141:1.2.4.dfsg-5vulnerable
Debianasterisk141:1.2.4.dfsg-6vulnerable
Debianasterisk141:1.2.4.dfsg-6+b1vulnerable
Debianasterisk141:1.2.4.dfsg-7vulnerable
Debianasterisk141:1.2.7.1.dfsg-1vulnerable
Debianasterisk141:1.2.7.1.dfsg-2vulnerable
Debianasterisk141:1.2.7.1.dfsg-3vulnerable
Debianasterisk141:1.2.9.1.dfsg-1vulnerable
Debianasterisk141:1.4.10~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-2vulnerable
Debianasterisk141:1.4.11~dfsg-3vulnerable
Debianasterisk141:1.4.11~dfsg-4vulnerable
Debianasterisk141:1.4.13~dfsg-1vulnerable
Debianasterisk141:1.4.15~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-2vulnerable
Debianasterisk141:1.4.17~dfsg-1vulnerable
Debianasterisk141:1.4.17~dfsg-2vulnerable
Debianasterisk141:1.4.18.1~dfsg-1vulnerable
Debianasterisk141:1.4.18~dfsg-1vulnerable
Debianasterisk141:1.4.19.1~dfsg-1vulnerable
Debianasterisk141:1.4.20~dfsg-1vulnerable
Debianasterisk141:1.4.21.1~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2.1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny5vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny6vulnerable
Debianasterisk141:1.4.21.2~dfsg-3.1vulnerable
Debianasterisk141:1.4.2~dfsg-1vulnerable
Debianasterisk141:1.4.2~dfsg-2vulnerable
Debianasterisk141:1.4.2~dfsg-3vulnerable
Debianasterisk141:1.4.2~dfsg-4vulnerable
Debianasterisk141:1.4.2~dfsg-5vulnerable
Debianasterisk141:1.4.3~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-2vulnerable
Debianasterisk141:1.4.4~dfsg-3vulnerable
Debianasterisk141:1.4.5~dfsg-1vulnerable
Debianasterisk141:1.4.6~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-2vulnerable
Debianasterisk141:1.4.9~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg~rc3-1vulnerable
Debianasterisk141:1.6.2.0-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~beta3-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~rc1-1vulnerable
Debianasterisk141:1.6.2.0~rc3-1vulnerable
Debianasterisk141:1.6.2.0~rc3-2vulnerable
Debianasterisk141:1.6.2.0~rc6-1vulnerable
Debianasterisk141:1.6.2.0~rc7-1vulnerable
Debianasterisk141:1.6.2.2-1vulnerable
Debianasterisk141:1.6.2.6-1vulnerable
Debianasterisk141:1.6.2.7-1vulnerable
Debianasterisk141:1.6.2.9-1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+2vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+3vulnerable
Debianasterisk141:1.6.2.9-2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze1vulnerable
Debianasterisk141:1.6.2.9-2+squeeze10vulnerable
Debianasterisk141:1.6.2.9-2+squeeze11vulnerable
Debianasterisk141:1.6.2.9-2+squeeze12vulnerable
Debianasterisk141:1.6.2.9-2+squeeze2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze3vulnerable
Debianasterisk141:1.6.2.9-2+squeeze4vulnerable
Debianasterisk141:1.6.2.9-2+squeeze5vulnerable
Debianasterisk141:1.6.2.9-2+squeeze6vulnerable
Debianasterisk141:1.6.2.9-2+squeeze7vulnerable
Debianasterisk141:1.6.2.9-2+squeeze8vulnerable
Debianasterisk141:1.6.2.9-2+squeeze9vulnerable
Debianasterisk141:1.8.10.0~dfsg-1vulnerable
Debianasterisk141:1.8.10.1~dfsg-1vulnerable
Debianasterisk141:1.8.11.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1+powerpcspe1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-2vulnerable
Debianasterisk141:1.8.13.1~dfsg-3vulnerable
Debianasterisk141:1.8.3.3-1vulnerable
Debianasterisk141:1.8.4-1vulnerable
Debianasterisk141:1.8.4.2-1vulnerable
Debianasterisk141:1.8.4.3-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-1vulnerable
Debianasterisk141:1.8.7.1~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-3vulnerable
Debianasterisk141:1.8.8.0~dfsg-1vulnerable
Debianasterisk141:1.8.8.2~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.10.2~dfsg-1vulnerable
Debianasterisk141:11.10.2~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-1vulnerable
Debianasterisk141:11.11.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-2vulnerable
Debianasterisk141:11.12.0~dfsg-1vulnerable
Debianasterisk141:11.12.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.12.1~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.13.1~dfsg-1vulnerable
Debianasterisk141:11.13.1~dfsg-2vulnerable
Debianasterisk141:11.13.1~dfsg-2~bpo70+1vulnerable
Debianasterisk141:11.5.1~dfsg-1vulnerable
Debianasterisk141:11.5.1~dfsg-2vulnerable
Debianasterisk141:11.5.1~dfsg1-1vulnerable
Debianasterisk141:11.5.1~dfsg1-1~bpo70+1vulnerable
Debianasterisk141:11.6.0~dfsg-1vulnerable
Debianasterisk141:11.6.0~dfsg-2vulnerable
Debianasterisk141:11.6.0~dfsg-3vulnerable
Debianasterisk141:11.7.0~dfsg-1vulnerable
Debianasterisk141:11.7.0~dfsg-1+e1vulnerable
Debianasterisk141:11.7.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.8.0~dfsg-1vulnerable
Debianasterisk141:11.8.0~dfsg-2vulnerable
Debianasterisk141:11.8.1~dfsg-1vulnerable
Debianasterisk141:11.8.1~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.9.0~dfsg-1vulnerable
Debianasterisk141:11.9.0~dfsg-2vulnerable
Debianasterisk141:11.9.0~dfsg-2~bpo70+1vulnerable
Debianasterisk141:13.0.0~dfsg-1vulnerable
Debianasterisk141:13.0.0~dfsg-2vulnerable
Debianasterisk141:13.1.0~dfsg-1vulnerable
Debianasterisk141:13.1.0~dfsg-1.1vulnerable
Debianasterisk141:13.10.0~dfsg-1vulnerable
Debianasterisk141:13.11.2~dfsg-1vulnerable
Debianasterisk141:13.12.1~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-1vulnerable
Debianasterisk141:13.13.1~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-3vulnerable
Debianasterisk141:13.13.1~dfsg-3~exp1vulnerable
Debianasterisk141:13.13.1~dfsg-4vulnerable
Debianasterisk141:13.14.0~dfsg-1vulnerable
Debianasterisk141:13.14.0~dfsg-1~exp1vulnerable
Debianasterisk141:13.14.1~dfsg-1vulnerable
Debianasterisk141:13.14.1~dfsg-2vulnerable
Debianasterisk141:13.17.0~dfsg-1vulnerable
Debianasterisk141:13.17.0~dfsg-2vulnerable
Debianasterisk141:13.17.1~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-2vulnerable
Debianasterisk141:13.18.1~dfsg-1vulnerable
Debianasterisk141:13.18.3~dfsg-1vulnerable
Debianasterisk141:13.18.5~dfsg-1vulnerable
Debianasterisk141:13.20.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-2vulnerable
Debianasterisk141:13.23.1~dfsg-1vulnerable
Debianasterisk141:13.23.1~dfsg-2vulnerable
Debianasterisk141:13.7.2~dfsg-1vulnerable
Debianasterisk141:13.8.0~dfsg-1vulnerable
Debianasterisk141:13.8.2~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-1vulnerable
Debianasterisk141:16.1.0~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-3vulnerable
Debianasterisk141:16.1.0~dfsg-4vulnerable
Debianasterisk141:16.1.1~dfsg-1vulnerable
Debianasterisk141:16.10.0~dfsg-1vulnerable
Debianasterisk141:16.12.0~dfsg-1vulnerable
Debianasterisk141:16.15.0~dfsg-1vulnerable
Debianasterisk141:16.15.1~dfsg-1vulnerable
Debianasterisk141:16.16.1~dfsg+~2.10-1vulnerable
Debianasterisk141:16.16.1~dfsg+~2.10-2vulnerable
Debianasterisk141:16.16.1~dfsg-1vulnerable
Debianasterisk141:16.16.1~dfsg-1~bpo10+1vulnerable
Debianasterisk141:16.16.1~dfsg-2vulnerable
Debianasterisk141:16.16.1~dfsg-3vulnerable
Debianasterisk141:16.16.1~dfsg-4vulnerable
Debianasterisk141:16.2.0~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-2vulnerable
Debianasterisk141:16.23.0~dfsg+~2.10-1vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.20220309-1vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.20220309-2vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.10.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.10.0~dfsg+~cs6.10.40431411-2vulnerable
Debianasterisk141:18.10.1~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.11.1~dfsg+~cs6.10.40431413-1vulnerable
Debianasterisk141:18.11.2~dfsg+~cs6.10.40431413-1vulnerable
Debianasterisk141:18.12.0~dfsg+~cs6.12.40431413-1vulnerable
Debianasterisk141:18.14.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:18.14.0~~rc1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:18.9.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:20.0.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.0~dfsg+~cs6.12.40431414-2vulnerable
Debianasterisk141:20.0.0~~rc1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.0~~rc2~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.1.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.1.0~~rc2~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.2.1~dfsg+~cs6.13.40431413-1vulnerable
Debianasterisk141:20.3.0~dfsg+~cs6.13.40431413-1vulnerable
Debianasterisk141:20.4.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.4.0~dfsg+~cs6.13.40431414-2vulnerable
Debianasterisk141:20.5.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.5.1~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.5.2~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.6.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.6.0~dfsg+~cs6.13.40431414-2vulnerable
Debianasterisk141:20.8.1~dfsg+~cs6.14.40431414-1vulnerable
Debianasterisk141:20.9.3~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.0.0~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.0.0~~rc2~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.1.0~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.1.1~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.2.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.2.0~dfsg+~cs6.15.60671435-2vulnerable
Debianasterisk141:22.3.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.3.0~~rc1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.4.1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.4.1~dfsg+~cs6.15.60671435-2vulnerable
Debianasterisk141:22.5.1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.5.2~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.6.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.7.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.8.0+dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.8.2+dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.9.0+dfsg+~cs6.16.60671434-1vulnerable
Debianasterisk141:22.10.0+dfsg+~cs6.17.60671434-1fixed
Alpinepjproject3.242.17-r0fixed
Ubuntupjprojectpro2.6~dfsg-2vulnerable
Ubuntupjprojectpro2.7~dfsg-1vulnerable
Ubuntupjprojectpro2.7.1~dfsg-1vulnerable
Ubuntupjprojectpro2.7.1~dfsg-1build1vulnerable
Ubuntupjprojectpro2.7.2~dfsg-1vulnerable
Ubuntupjprojectpro2.7.2~dfsg-1ubuntu0.1~esm1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianasteriskdeb141:22.10.0+dfsg+~cs6.17.60671434-1Not reportedDEBIAN-CVE-2026-26967Not reported
Alpinepjprojectapk3.242.17-r0Not reportedALPINE-CVE-2026-26967Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]