Dhkts1

An out-of-bounds read occurs when parsing a malformed Content-ID URI in a SIP multipart message body. This is caused by insufficient length validation, which allows reads to extend beyond the intended buffer bounds.

An integer overflow occurs in the media stream buffer size calculation when processing Session Description Protocol (SDP) with asymmetric ptime configuration. This overflow can lead to an undersized buffer allocation, potentially resulting in memory corruption or unexpected application termination.

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free issue in the ICE session. This occurs when race conditions happen between session destruction and callbacks.