PT-2026-86171 · Pjsip · Pjsip

CVE-2026-57165

·

Published

2026-09-04

·

Updated

2026-09-04

CVSS v4.0

6.3

Medium

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions PJSIP versions prior to commit 628b716
Description A stack buffer overflow occurs in the PJLIB-UTIL telnet CLI front-end during the command line redrawing process when recalling history. This issue resides in the handle up down() function within cli telnet.c. The line-redraw sequence for a recalled history entry can exceed the capacity of a fixed-size stack buffer, potentially causing the application to terminate. This affects only applications that have the telnet CLI front-end enabled. Exploitation requires access to the unauthenticated telnet CLI.
Recommendations Update to the version containing commit 628b716. As a temporary mitigation, disable the telnet CLI front-end.

Exploit

Fix

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-57165
GHSA-RPQ9-9FX7-95XW

Affected Products

Pjsip