CVE-2022-24764

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API `pjmedia_sdp_print(), pjmedia_sdp_media_print()`. Applications that do not use PJSUA2 and do not directly call `pjmedia_sdp_print()` or `pjmedia_sdp_media_print()` should not be affected. A patch is available on the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.

• CWE-120
• CWE-121
• CWE-787

• https://github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00Patch, Third Party Advisory
• https://github.com/pjsip/pjproject/security/advisories/GHSA-f5qg-pqcg-765mPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00021.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html
• https://security.gentoo.org/glsa/202210-37Third Party Advisory
• https://www.debian.org/security/2022/dsa-5285Third Party Advisory
• https://github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00Patch, Third Party Advisory
• https://github.com/pjsip/pjproject/security/advisories/GHSA-f5qg-pqcg-765mPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00021.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html
• https://lists.debian.org/debian-lts-announce/2024/09/msg00030.html
• https://security.gentoo.org/glsa/202210-37Third Party Advisory
• https://www.debian.org/security/2022/dsa-5285Third Party Advisory

Published

Mar 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24759`@chainsafe/libp2p-noise` contains TypeScript implementation…7.4
• CVE-2022-2476A null pointer dereference bug was found in wavpack-5.4.0 Th…5.5
• CVE-2022-24760Parse Server is an open source http web server backend. In v…10
• CVE-2022-24761Waitress is a Web Server Gateway Interface server for Python…7.5
• CVE-2022-24762sysend.js is a library that allows a user to send messages b…6.5
• CVE-2022-24763PJSIP is a free and open source multimedia communication lib…7.5
• CVE-2022-24765Git for Windows is a fork of Git containing Windows-specific…7.8
• CVE-2022-24766mitmproxy is an interactive, SSL/TLS-capable intercepting pr…9.8
• CVE-2022-24767GitHub: Git for Windows' uninstaller vulnerable to DLL hijac…7.8
• CVE-2022-24768Argo CD is a declarative, GitOps continuous delivery tool fo…8.8
• CVE-2022-24769Moby is an open-source project created by Docker to enable a…5.9
• CVE-2022-2477Use after free in Guest View in Google Chrome prior to 103.0…8.8