Approved changes feed: RSS · Atom

cpe:2.3:a:pjsip:pjmedia-video:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPjsip (40339db9-f1c9-574f-a336-1f2a0c5d69ac)
ProductPjmedia Video (fee0f014-6db6-5885-b5bb-1038368c9f77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26203 vulnerable 2026-06-08 07:53:21.404105 PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL
PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the issue.
Published: 2026-02-19T19:28:58.859Z
Updated: 2026-02-19T21:22:31.050Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.