CVE-2026-32942: PJSIP has ICE session use-after-free race conditions
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32942?
CVE-2026-32942 is classified as a high severity vulnerability due to the potential for exploitation through use-after-free conditions.
How do I fix CVE-2026-32942?
To fix CVE-2026-32942, upgrade to PJSIP version 2.17 or higher where the vulnerability has been addressed.
What types of systems are affected by CVE-2026-32942?
CVE-2026-32942 affects all versions of PJSIP up to and including 2.16.
What implications does CVE-2026-32942 have for an organization?
CVE-2026-32942 can lead to the execution of arbitrary code or crashes, potentially impacting service availability and security.
Is CVE-2026-32942 a client or server-side vulnerability?
CVE-2026-32942 can be considered a server-side vulnerability, as it affects the implementation of the PJSIP library for multimedia communications.