P
Vendor security profile
pjsip
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical3
CISA KEV0
Public exploit0
Patch rate%82
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
1
0
0
0
0
0
10
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical3 (27%)
High3 (27%)
Medium5 (45%)
Patch and exploitation view
%82
Verified patch
%0
CISA KEV
%0
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
7.4
CVE-2026-84975
PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
P
Patch status unknownEPSS %0
6.9
CVE-2026-77396
PJSIP: Heap buffer overflow in the AVI parser
P
Patch status unknownEPSS %0
6.3
CVE-2026-57166
PJSIP: Pre-authentication overflow in the telnet CLI error
P
Patch verifiedEPSS %1
8.8
CVE-2026-57161
PJSIP: Stack overflow handling Service-Route headers in a registration response
P
Patch verifiedEPSS %0