CVE-2026-57159

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit 673b978

Description A remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. The function assign pt and update map() in pjmedia/src/pjmedia/sdp neg.c uses payload-type numbers from a remote SDP offer or answer to index fixed-size internal tables without sufficient bounds validation. A crafted remote SDP can cause memory access outside these tables, leading to memory corruption and denial of service. This issue only affects builds where PJMEDIA SDP NEG MAINTAIN REMOTE PT MAP is enabled, which is an interoperability option and disabled by default.

Recommendations Update PJSIP to commit 673b978 or later. As a temporary mitigation, ensure the PJMEDIA SDP NEG MAINTAIN REMOTE PT MAP feature is disabled.