Home / Vulnerability Intelligence / CVE-2026-40614

CVE-2026-40614 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 23, 2026

PJSIP - Buffer Overflow

Published: April 21, 2026Updated: April 23, 2026Remote Exploitable

Overview

PJSIP <= 2.16 contains a buffer overflow caused by insufficient buffer size validation in the Opus codec decode path, letting attackers cause memory corruption via crafted Opus audio frames, exploit requires crafted input frames.

Severity & Score

Severity: High

CVSS Score: 8.8

Impact

Attackers can cause heap buffer overflow leading to potential memory corruption or denial of service.

Mitigation

Update to the latest version of PJSIP.

References

https://github.com/pjsip/pjproject/commit/17897e835818f8ee03b1806ddcd7b95ea16d2c0e
https://github.com/pjsip/pjproject/security/advisories/GHSA-j59p-4xrr-fp8g

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-40614
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed

CWE

CWE-122

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H