https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:24:30.397598+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-37706 CVE-2021-37706 — Potential integer underflow upon receiving STUN message in PJSIP 2026-10-05T17:24:30.403432+00:00

Affected: pjsip pjproject

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37706 UBUNTU-CVE-2021-37706 2026-10-05T17:24:30.403495+00:00

Affected: Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.