WID-SEC-W-2026-1378

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Asterisk (pjproject): Mehrere Schwachstellen

view advisory published 2026-05-05

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen, was möglicherweise die Ausführung von Code, die Umgehung von Sicherheitsmaßnahmen oder andere nicht näher spezifizierte Auswirkungen ermöglicht.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2026-33069UShigh7.5—
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_parse(). After bo…
CVE-2026-32942UShigh8.1—
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs w…
CVE-2026-28799UShigh7.5—
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a heap use-after-free vulnerability exists in PJSIP's event subscription frame…
CVE-2026-25994UScritical9.8Exploit
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing cre…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan