CVE-2026-32942 — PJSIP has ICE session use-after-free race conditions
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occur…
Published: 2026-03-20 · CVSS: 8.0 · CVSS 4.0
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7