CVE catalog

CVE-2026-40892

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsip_auth_create_digest2() in PJSIP when using pre-computed diges

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.42% · Oct 25, 2026

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsip_auth_create_digest2() in PJSIP when using pre-computed digest credentials (PJSIP_CRED_DATA_DIGEST). The function copies credential data using cred_info->data.slen as the length without an upper-bound check, which can overflow the fixed-size ha1 stack buffer (128 bytes) if data.slen exceeds the expected digest string length.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpepjsipNot reported2.17fixed
Debianasterisk140.1.11-3vulnerable
Debianasterisk140.1.11-3woody1vulnerable
Debianasterisk141:1.0.5-2vulnerable
Debianasterisk141:1.0.5-4vulnerable
Debianasterisk141:1.0.6-1vulnerable
Debianasterisk141:1.0.6-2vulnerable
Debianasterisk141:1.0.7-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge3vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge4vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge5vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge6vulnerable
Debianasterisk141:1.0.9.dfsg-1vulnerable
Debianasterisk141:1.0.9.dfsg-3vulnerable
Debianasterisk141:1.0.9.dfsg-4vulnerable
Debianasterisk141:1.0.9.dfsg-5vulnerable
Debianasterisk141:1.0.9.dfsg-6vulnerable
Debianasterisk141:1.2.0-beta1.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-2vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-3vulnerable
Debianasterisk141:1.2.0-rc1.dfsg-1vulnerable
Debianasterisk141:1.2.0-rc2.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-2vulnerable
Debianasterisk141:1.2.0.dfsg-3vulnerable
Debianasterisk141:1.2.0.dfsg-4vulnerable
Debianasterisk141:1.2.0.dfsg-5vulnerable
Debianasterisk141:1.2.0.dfsg-6vulnerable
Debianasterisk141:1.2.1.dfsg-1vulnerable
Debianasterisk141:1.2.1.dfsg-2vulnerable
Debianasterisk141:1.2.1.dfsg-3vulnerable
Debianasterisk141:1.2.10.dfsg-1vulnerable
Debianasterisk141:1.2.10.dfsg-1bpo1vulnerable
Debianasterisk141:1.2.10.dfsg-2vulnerable
Debianasterisk141:1.2.10.dfsg-3vulnerable
Debianasterisk141:1.2.11.dfsg-1vulnerable
Debianasterisk141:1.2.12.1.dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch1vulnerable
Debianasterisk141:1.2.13~dfsg-2etch2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch3vulnerable
Debianasterisk141:1.2.13~dfsg-2etch4vulnerable
Debianasterisk141:1.2.14~dfsg-1vulnerable
Debianasterisk141:1.2.14~dfsg-2vulnerable
Debianasterisk141:1.2.14~dfsg-3vulnerable
Debianasterisk141:1.2.14~dfsg-4vulnerable
Debianasterisk141:1.2.15~dfsg-1vulnerable
Debianasterisk141:1.2.16~dfsg-1vulnerable
Debianasterisk141:1.2.17~dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-2vulnerable
Debianasterisk141:1.2.4.dfsg-3vulnerable
Debianasterisk141:1.2.4.dfsg-4vulnerable
Debianasterisk141:1.2.4.dfsg-5vulnerable
Debianasterisk141:1.2.4.dfsg-6vulnerable
Debianasterisk141:1.2.4.dfsg-6+b1vulnerable
Debianasterisk141:1.2.4.dfsg-7vulnerable
Debianasterisk141:1.2.7.1.dfsg-1vulnerable
Debianasterisk141:1.2.7.1.dfsg-2vulnerable
Debianasterisk141:1.2.7.1.dfsg-3vulnerable
Debianasterisk141:1.2.9.1.dfsg-1vulnerable
Debianasterisk141:1.4.10~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-2vulnerable
Debianasterisk141:1.4.11~dfsg-3vulnerable
Debianasterisk141:1.4.11~dfsg-4vulnerable
Debianasterisk141:1.4.13~dfsg-1vulnerable
Debianasterisk141:1.4.15~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-2vulnerable
Debianasterisk141:1.4.17~dfsg-1vulnerable
Debianasterisk141:1.4.17~dfsg-2vulnerable
Debianasterisk141:1.4.18.1~dfsg-1vulnerable
Debianasterisk141:1.4.18~dfsg-1vulnerable
Debianasterisk141:1.4.19.1~dfsg-1vulnerable
Debianasterisk141:1.4.20~dfsg-1vulnerable
Debianasterisk141:1.4.21.1~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2.1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny5vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny6vulnerable
Debianasterisk141:1.4.21.2~dfsg-3.1vulnerable
Debianasterisk141:1.4.2~dfsg-1vulnerable
Debianasterisk141:1.4.2~dfsg-2vulnerable
Debianasterisk141:1.4.2~dfsg-3vulnerable
Debianasterisk141:1.4.2~dfsg-4vulnerable
Debianasterisk141:1.4.2~dfsg-5vulnerable
Debianasterisk141:1.4.3~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-2vulnerable
Debianasterisk141:1.4.4~dfsg-3vulnerable
Debianasterisk141:1.4.5~dfsg-1vulnerable
Debianasterisk141:1.4.6~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-2vulnerable
Debianasterisk141:1.4.9~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg~rc3-1vulnerable
Debianasterisk141:1.6.2.0-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~beta3-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~rc1-1vulnerable
Debianasterisk141:1.6.2.0~rc3-1vulnerable
Debianasterisk141:1.6.2.0~rc3-2vulnerable
Debianasterisk141:1.6.2.0~rc6-1vulnerable
Debianasterisk141:1.6.2.0~rc7-1vulnerable
Debianasterisk141:1.6.2.2-1vulnerable
Debianasterisk141:1.6.2.6-1vulnerable
Debianasterisk141:1.6.2.7-1vulnerable
Debianasterisk141:1.6.2.9-1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+2vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+3vulnerable
Debianasterisk141:1.6.2.9-2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze1vulnerable
Debianasterisk141:1.6.2.9-2+squeeze10vulnerable
Debianasterisk141:1.6.2.9-2+squeeze11vulnerable
Debianasterisk141:1.6.2.9-2+squeeze12vulnerable
Debianasterisk141:1.6.2.9-2+squeeze2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze3vulnerable
Debianasterisk141:1.6.2.9-2+squeeze4vulnerable
Debianasterisk141:1.6.2.9-2+squeeze5vulnerable
Debianasterisk141:1.6.2.9-2+squeeze6vulnerable
Debianasterisk141:1.6.2.9-2+squeeze7vulnerable
Debianasterisk141:1.6.2.9-2+squeeze8vulnerable
Debianasterisk141:1.6.2.9-2+squeeze9vulnerable
Debianasterisk141:1.8.10.0~dfsg-1vulnerable
Debianasterisk141:1.8.10.1~dfsg-1vulnerable
Debianasterisk141:1.8.11.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1+powerpcspe1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-2vulnerable
Debianasterisk141:1.8.13.1~dfsg-3vulnerable
Debianasterisk141:1.8.3.3-1vulnerable
Debianasterisk141:1.8.4-1vulnerable
Debianasterisk141:1.8.4.2-1vulnerable
Debianasterisk141:1.8.4.3-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-1vulnerable
Debianasterisk141:1.8.7.1~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-3vulnerable
Debianasterisk141:1.8.8.0~dfsg-1vulnerable
Debianasterisk141:1.8.8.2~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.10.2~dfsg-1vulnerable
Debianasterisk141:11.10.2~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-1vulnerable
Debianasterisk141:11.11.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-2vulnerable
Debianasterisk141:11.12.0~dfsg-1vulnerable
Debianasterisk141:11.12.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.12.1~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.13.1~dfsg-1vulnerable
Debianasterisk141:11.13.1~dfsg-2vulnerable
Debianasterisk141:11.13.1~dfsg-2~bpo70+1vulnerable
Debianasterisk141:11.5.1~dfsg-1vulnerable
Debianasterisk141:11.5.1~dfsg-2vulnerable
Debianasterisk141:11.5.1~dfsg1-1vulnerable
Debianasterisk141:11.5.1~dfsg1-1~bpo70+1vulnerable
Debianasterisk141:11.6.0~dfsg-1vulnerable
Debianasterisk141:11.6.0~dfsg-2vulnerable
Debianasterisk141:11.6.0~dfsg-3vulnerable
Debianasterisk141:11.7.0~dfsg-1vulnerable
Debianasterisk141:11.7.0~dfsg-1+e1vulnerable
Debianasterisk141:11.7.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.8.0~dfsg-1vulnerable
Debianasterisk141:11.8.0~dfsg-2vulnerable
Debianasterisk141:11.8.1~dfsg-1vulnerable
Debianasterisk141:11.8.1~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.9.0~dfsg-1vulnerable
Debianasterisk141:11.9.0~dfsg-2vulnerable
Debianasterisk141:11.9.0~dfsg-2~bpo70+1vulnerable
Debianasterisk141:13.0.0~dfsg-1vulnerable
Debianasterisk141:13.0.0~dfsg-2vulnerable
Debianasterisk141:13.1.0~dfsg-1vulnerable
Debianasterisk141:13.1.0~dfsg-1.1vulnerable
Debianasterisk141:13.10.0~dfsg-1vulnerable
Debianasterisk141:13.11.2~dfsg-1vulnerable
Debianasterisk141:13.12.1~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-1vulnerable
Debianasterisk141:13.13.1~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-3vulnerable
Debianasterisk141:13.13.1~dfsg-3~exp1vulnerable
Debianasterisk141:13.13.1~dfsg-4vulnerable
Debianasterisk141:13.14.0~dfsg-1vulnerable
Debianasterisk141:13.14.0~dfsg-1~exp1vulnerable
Debianasterisk141:13.14.1~dfsg-1vulnerable
Debianasterisk141:13.14.1~dfsg-2vulnerable
Debianasterisk141:13.17.0~dfsg-1vulnerable
Debianasterisk141:13.17.0~dfsg-2vulnerable
Debianasterisk141:13.17.1~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-2vulnerable
Debianasterisk141:13.18.1~dfsg-1vulnerable
Debianasterisk141:13.18.3~dfsg-1vulnerable
Debianasterisk141:13.18.5~dfsg-1vulnerable
Debianasterisk141:13.20.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-2vulnerable
Debianasterisk141:13.23.1~dfsg-1vulnerable
Debianasterisk141:13.23.1~dfsg-2vulnerable
Debianasterisk141:13.7.2~dfsg-1vulnerable
Debianasterisk141:13.8.0~dfsg-1vulnerable
Debianasterisk141:13.8.2~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-1vulnerable
Debianasterisk141:16.1.0~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-3vulnerable
Debianasterisk141:16.1.0~dfsg-4vulnerable
Debianasterisk141:16.1.1~dfsg-1vulnerable
Debianasterisk141:16.10.0~dfsg-1vulnerable
Debianasterisk141:16.12.0~dfsg-1vulnerable
Debianasterisk141:16.15.0~dfsg-1vulnerable
Debianasterisk141:16.15.1~dfsg-1vulnerable
Debianasterisk141:16.16.1~dfsg+~2.10-1vulnerable
Debianasterisk141:16.16.1~dfsg+~2.10-2vulnerable
Debianasterisk141:16.16.1~dfsg-1vulnerable
Debianasterisk141:16.16.1~dfsg-1~bpo10+1vulnerable
Debianasterisk141:16.16.1~dfsg-2vulnerable
Debianasterisk141:16.16.1~dfsg-3vulnerable
Debianasterisk141:16.16.1~dfsg-4vulnerable
Debianasterisk141:16.2.0~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-2vulnerable
Debianasterisk141:16.23.0~dfsg+~2.10-1vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.20220309-1vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.20220309-2vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.10.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.10.0~dfsg+~cs6.10.40431411-2vulnerable
Debianasterisk141:18.10.1~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.11.1~dfsg+~cs6.10.40431413-1vulnerable
Debianasterisk141:18.11.2~dfsg+~cs6.10.40431413-1vulnerable
Debianasterisk141:18.12.0~dfsg+~cs6.12.40431413-1vulnerable
Debianasterisk141:18.14.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:18.14.0~~rc1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:18.9.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:20.0.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.0~dfsg+~cs6.12.40431414-2vulnerable
Debianasterisk141:20.0.0~~rc1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.0~~rc2~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.1.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.1.0~~rc2~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.2.1~dfsg+~cs6.13.40431413-1vulnerable
Debianasterisk141:20.3.0~dfsg+~cs6.13.40431413-1vulnerable
Debianasterisk141:20.4.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.4.0~dfsg+~cs6.13.40431414-2vulnerable
Debianasterisk141:20.5.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.5.1~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.5.2~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.6.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.6.0~dfsg+~cs6.13.40431414-2vulnerable
Debianasterisk141:20.8.1~dfsg+~cs6.14.40431414-1vulnerable
Debianasterisk141:20.9.3~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.0.0~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.0.0~~rc2~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.1.0~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.1.1~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.2.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.2.0~dfsg+~cs6.15.60671435-2vulnerable
Debianasterisk141:22.3.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.3.0~~rc1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.4.1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.4.1~dfsg+~cs6.15.60671435-2vulnerable
Debianasterisk141:22.5.1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.5.2~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.6.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.7.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.8.0+dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.8.2+dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.9.0+dfsg+~cs6.16.60671434-1vulnerable
Debianasterisk141:22.10.0+dfsg+~cs6.17.60671434-1fixed
Alpinepjproject3.242.17-r0fixed
CpepjsipNot reported2.17fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpepjsipcpeNot reported2.17Not reportedNot reportedNot reported
Debianasteriskdeb141:22.10.0+dfsg+~cs6.17.60671434-1Not reportedDEBIAN-CVE-2026-40892Not reported
Alpinepjprojectapk3.242.17-r0Not reportedALPINE-CVE-2026-40892Not reported
CpepjsipcpeNot reported2.17Not reportedNVD-CVE-2026-40892Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]