CVE-2026-40614

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is a buffer overflow when decoding Opus audio frames due to insufficient buffer size validation in the Opus codec decode path. The FEC decode buffers (dec_frame[].buf) were allocated based on a PCM-derived formula: (sample_rate/1000) * 60 * channel_cnt * 2. At 8 kHz mono this yields only 960 bytes, but codec_parse() can output encoded frames up to MAX_ENCODED_PACKET_SIZE (1280) bytes via opus_repacketizer_out_range(). The three pj_memcpy() calls in codec_decode() copied input->size bytes without bounds checking, causing a heap buffer overflow.

• CWE-122

• https://github.com/pjsip/pjproject/commit/17897e835818f8ee03b1806ddcd7b95ea16d2c0ePatch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-j59p-4xrr-fp8gPatch, Vendor Advisory

Published

Apr 21, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40609Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2026-4061The Geo Mashup plugin for WordPress is vulnerable to Time-Ba…7.5
• CVE-2026-40610BentoML is a Python library for building online serving syst…5.5
• CVE-2026-40611Let's Encrypt client and ACME library written in Go (Lego). …8.8
• CVE-2026-40612jq is a command-line JSON processor. In 1.8.1 and earlier, j…5.5
• CVE-2026-40613Coturn is a free open source implementation of TURN and STUN…7.5
• CVE-2026-40618When an SSL profile is configured on a virtual server on BIG…8.7
• CVE-2026-40619A high security vulnerability affecting Security Center main…7.8
• CVE-2026-4062The Geo Mashup plugin for WordPress is vulnerable to Time-Ba…7.5
• CVE-2026-40620A vulnerability in SenseLive X3050’s embedded management ser…9.8
• CVE-2026-40621ELECOM wireless LAN access point devices do not require auth…9.8
• CVE-2026-40622NLnet Labs Unbound 1.16.2 up to and including version 1.25.0…7.5