---
id: CVE-2026-101970
title: >-
  A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper
  Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated
  adjacent attacker to crash the routing daemon via specific PIM messages when
  sparse…
summary: >-
  A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper
  Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated
  adjacent attacker to crash the routing daemon via specific PIM messages when
  sparse…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-416
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T17:17:49.577'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-101970'
references:
  - url: 'https://supportportal.juniper.net/JSA112187'
    label: sirt@juniper.net
tags:
  - nvd
ingestedAt: '2026-10-14T17:44:53.635Z'
---

## Overview

A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash the routing daemon via specific PIM messages when sparse mode PIM is configured.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.