CVE-2021-43300

CRITICAL

pjsip < 2.11.1 - Stack-based Buffer Overflow via pjsua_recorder_create Filename Argument

Title source: llm
STIX 2.1

Description

Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.

References (6)

Core 6

Scores

CVSS v3 9.8
EPSS 0.0234
EPSS Percentile 81.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-121 CWE-787
Status published
Products (4)
debian/debian_linux 9.0
debian/debian_linux 10.0
debian/debian_linux 11.0
teluu/pjsip < 2.11.1
Published Feb 16, 2022
Tracked Since Feb 18, 2026