CVE-2026-40892: PJSIP: Stack buffer overflow in pjsip_auth_create_digest2()
PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a stack buffer overflow exists in pjsipauthcreatedigest2() in PJSIP when using pre-computed digest credentials (PJSIPCREDDATADIGEST). The function copies credential data using credinfo->data.slen as the length without an upper-bound check, which can overflow the fixed-size ha1 stack buffer (128 bytes) if data.slen exceeds the expected digest string length.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40892?
CVE-2026-40892 has been classified as a high severity vulnerability due to its potential for exploitation via stack buffer overflow.
How do I fix CVE-2026-40892?
To mitigate CVE-2026-40892, upgrade to PJSIP version 2.17 or later where the vulnerability has been addressed.
What versions of PJSIP are affected by CVE-2026-40892?
CVE-2026-40892 affects all versions of PJSIP up to and including version 2.16.
What impacts does CVE-2026-40892 have on PJSIP applications?
CVE-2026-40892 can lead to application crashes or code execution, compromising the security of PJSIP applications using vulnerable versions.
Is CVE-2026-40892 exploitative in nature?
Yes, CVE-2026-40892 is exploitative as it can allow attackers to take control of affected systems through buffer overflow.