CVE-2026-25994 — PJSIP has a heap buffer overflow in ICE with long username
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing …
Published: 2026-02-11 · CVSS: 8.1 · CVSS 4.0
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7