{"id":"CVE-2026-57164","title":"PJSIP is a free and open source multimedia communication library written in C","summary":"PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applic…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"vendor":"teluu","product":"pjsip","affected":["pjsip <= 2.17"],"published":"2026-09-04","updated":"2026-09-11","sourceUpdated":"2026-09-11T15:53:18.427","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-57164","references":[{"url":"https://github.com/pjsip/pjproject/commit/8d5956afab2ede95ddb199078dc19a8ac0114f3d","label":"security-advisories@github.com"},{"url":"https://github.com/pjsip/pjproject/security/advisories/GHSA-59fr-724j-6fjv","label":"security-advisories@github.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57164.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-57164"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57164"}],"tags":["nvd","cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00269,"epssPercentile":0.19265,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-08T17:38:19.222679Z"},"scores":{"nvd":5.9,"cna":8.3,"vendor":7.4},"ingestedAt":"2026-09-08T18:07:34.885Z","slug":"CVE-2026-57164","body":"## Overview\n\nPJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once (a completion callback with no incremental on_data_read callback). When growing the response buffer, an incorrect size calculation based on the server-supplied Content-Length can leave the buffer too small, causing response data to be written past the end of the allocation. A malicious or man-in-the-middle HTTP server can trigger this with a crafted response; impact may range from unexpected application termination to memory corruption. Applications that consume the response incrementally (via on_data_read), or that only connect to trusted servers, are not affected. This issue has been patched via commit 8d5956a.\n\n## Affected\n\n- `pjsip <= 2.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-57164.json)","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201817,"id":"CVE-2026-57164","ts":1789399726492,"field":"cvss","old":"8.3","new":"5.9"},{"seq":201816,"id":"CVE-2026-57164","ts":1789399726492,"field":"severity","old":"high","new":"medium"},{"seq":200547,"id":"CVE-2026-57164","ts":1789397379908,"field":"cvss","old":"5.9","new":"8.3"},{"seq":200546,"id":"CVE-2026-57164","ts":1789397379908,"field":"severity","old":"medium","new":"high"},{"seq":198464,"id":"CVE-2026-57164","ts":1789391969187,"field":"cvss","old":"8.3","new":"5.9"},{"seq":198463,"id":"CVE-2026-57164","ts":1789391969187,"field":"severity","old":"high","new":"medium"},{"seq":196257,"id":"CVE-2026-57164","ts":1789383585862,"field":"cvss","old":"5.9","new":"8.3"},{"seq":196256,"id":"CVE-2026-57164","ts":1789383585862,"field":"severity","old":"medium","new":"high"},{"seq":195186,"id":"CVE-2026-57164","ts":1789380475439,"field":"cvss","old":"8.3","new":"5.9"},{"seq":195185,"id":"CVE-2026-57164","ts":1789380475439,"field":"severity","old":"high","new":"medium"},{"seq":193973,"id":"CVE-2026-57164","ts":1789378523410,"field":"cvss","old":"5.9","new":"8.3"},{"seq":193972,"id":"CVE-2026-57164","ts":1789378523410,"field":"severity","old":"medium","new":"high"},{"seq":192760,"id":"CVE-2026-57164","ts":1789376407635,"field":"cvss","old":"8.3","new":"5.9"},{"seq":192759,"id":"CVE-2026-57164","ts":1789376407635,"field":"severity","old":"high","new":"medium"},{"seq":191547,"id":"CVE-2026-57164","ts":1789373425123,"field":"cvss","old":"5.9","new":"8.3"},{"seq":191546,"id":"CVE-2026-57164","ts":1789373425123,"field":"severity","old":"medium","new":"high"},{"seq":190332,"id":"CVE-2026-57164","ts":1789369300596,"field":"cvss","old":"8.3","new":"5.9"},{"seq":190331,"id":"CVE-2026-57164","ts":1789369300596,"field":"severity","old":"high","new":"medium"},{"seq":189119,"id":"CVE-2026-57164","ts":1789368267810,"field":"cvss","old":"5.9","new":"8.3"},{"seq":189118,"id":"CVE-2026-57164","ts":1789368267810,"field":"severity","old":"medium","new":"high"},{"seq":187902,"id":"CVE-2026-57164","ts":1789365143759,"field":"cvss","old":"8.3","new":"5.9"},{"seq":187901,"id":"CVE-2026-57164","ts":1789365143759,"field":"severity","old":"high","new":"medium"},{"seq":186689,"id":"CVE-2026-57164","ts":1789363276575,"field":"cvss","old":"5.9","new":"8.3"},{"seq":186688,"id":"CVE-2026-57164","ts":1789363276575,"field":"severity","old":"medium","new":"high"},{"seq":185475,"id":"CVE-2026-57164","ts":1789361101779,"field":"cvss","old":"8.3","new":"5.9"},{"seq":185474,"id":"CVE-2026-57164","ts":1789361101779,"field":"severity","old":"high","new":"medium"},{"seq":184262,"id":"CVE-2026-57164","ts":1789358156467,"field":"cvss","old":"5.9","new":"8.3"},{"seq":184261,"id":"CVE-2026-57164","ts":1789358156467,"field":"severity","old":"medium","new":"high"},{"seq":182513,"id":"CVE-2026-57164","ts":1789354222848,"field":"cvss","old":"8.3","new":"5.9"},{"seq":182512,"id":"CVE-2026-57164","ts":1789354222848,"field":"severity","old":"high","new":"medium"},{"seq":181306,"id":"CVE-2026-57164","ts":1789353124226,"field":"cvss","old":"5.9","new":"8.3"},{"seq":181305,"id":"CVE-2026-57164","ts":1789353124226,"field":"severity","old":"medium","new":"high"},{"seq":180099,"id":"CVE-2026-57164","ts":1789350169523,"field":"cvss","old":"8.3","new":"5.9"},{"seq":180098,"id":"CVE-2026-57164","ts":1789350169523,"field":"severity","old":"high","new":"medium"},{"seq":178892,"id":"CVE-2026-57164","ts":1789348102250,"field":"cvss","old":"5.9","new":"8.3"},{"seq":178891,"id":"CVE-2026-57164","ts":1789348102250,"field":"severity","old":"medium","new":"high"},{"seq":177685,"id":"CVE-2026-57164","ts":1789346278012,"field":"cvss","old":"8.3","new":"5.9"},{"seq":177684,"id":"CVE-2026-57164","ts":1789346278012,"field":"severity","old":"high","new":"medium"},{"seq":176478,"id":"CVE-2026-57164","ts":1789343019301,"field":"cvss","old":"5.9","new":"8.3"},{"seq":176477,"id":"CVE-2026-57164","ts":1789343019301,"field":"severity","old":"medium","new":"high"},{"seq":174595,"id":"CVE-2026-57164","ts":1789334771994,"field":"cvss","old":"8.3","new":"5.9"},{"seq":174594,"id":"CVE-2026-57164","ts":1789334771994,"field":"severity","old":"high","new":"medium"},{"seq":173390,"id":"CVE-2026-57164","ts":1789333515661,"field":"cvss","old":"5.9","new":"8.3"},{"seq":173389,"id":"CVE-2026-57164","ts":1789333515661,"field":"severity","old":"medium","new":"high"},{"seq":172204,"id":"CVE-2026-57164","ts":1789331018448,"field":"cvss","old":"8.3","new":"5.9"},{"seq":172203,"id":"CVE-2026-57164","ts":1789331018448,"field":"severity","old":"high","new":"medium"},{"seq":171018,"id":"CVE-2026-57164","ts":1789328618399,"field":"cvss","old":"5.9","new":"8.3"},{"seq":171017,"id":"CVE-2026-57164","ts":1789328618399,"field":"severity","old":"medium","new":"high"},{"seq":169813,"id":"CVE-2026-57164","ts":1789327051389,"field":"cvss","old":"8.3","new":"5.9"},{"seq":169812,"id":"CVE-2026-57164","ts":1789327051389,"field":"severity","old":"high","new":"medium"}]}