PJSIP is a free and open source multimedia communication library written in C.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 20, 2026 · NIST NVD

   Detected

   PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17.

2. Jun 17, 2026 · NIST NVD

   Updated

   PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fixed in version 2.17.

Affected

• cpe pjsip/pjsipversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-32942

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-32942

  PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below contain a heap use-after-free vulnerability in the ICE session that occurs when there are race conditions between session destruction and the callbacks. This issue has been fix

  nvd.nist.gov

References

• Patch · github.com
• Issue Tracking · github.com
• Patch · github.com