CVE-2021-43299
highpriority · track · 40EPSS 0.025 · 85 %ileEURUUSEPSS · scored 2026-10-27
Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (9)
Products and version ranges known to be affected.
advisories (4)
Vendor and ecosystem advisories describing this.
- CVE-2021-433002022-02-16vendor · osvUS
Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
- CVE-2021-433012022-02-16vendor · osvUS
Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
- CVE-2021-433022022-02-16vendor · osvUS
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 characters.
- CVE-2021-433032022-02-16vendor · osvUS
Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer, regardless of the 'maxlen' argument supplied
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (23)
External citations — patches, advisories, analysis.
- https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9cnnvd
- https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlcnnvd
- https://lists.debian.org/debian-lts-announce/2022/11/msg00021.htmlcnnvd
- https://lists.debian.org/debian-lts-announce/2023/08/msg00038.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-43299cnnvd
- https://packetstormsecurity.com/files/169938/Debian-Security-Advisory-5285-1.htmlcnnvd
- https://vigilance.fr/vulnerability/PJSIP-five-vulnerabilities-37896cnnvd
- https://www.auscert.org.au/bulletins/ESB-2023.4947cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan