CVE-2022-24764

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.12 and prior

Description The issue is related to a stack buffer overflow vulnerability in the PJSIP multimedia communication library, specifically affecting users of PJSUA2 or those who call the API endpoints pjmedia sdp print() and pjmedia sdp media print(). This vulnerability can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. Applications not using PJSUA2 and not directly calling pjmedia sdp print() or pjmedia sdp media print() are not affected.

Recommendations For PJSIP versions 2.12 and prior, a patch is available on the master branch of the pjsip/pjproject GitHub repository. As a temporary workaround, consider disabling the pjmedia sdp print() and pjmedia sdp media print() functions until a patch is applied. Restrict access to the PJSUA2 API to minimize the risk of exploitation.