漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
PJSIP has an Out-of-bounds Read in SIP multipart parsing
Vulnerability Description
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_parse(). After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This allows 1-2 bytes of adjacent heap memory to be read. All applications that process incoming SIP messages with multipart bodies or SDP content are potentially affected. This issue is resolved in version 2.17.
CVSS Information
N/A
Vulnerability Type
跨界内存读
Vulnerability Title
PJSIP 缓冲区错误漏洞
Vulnerability Description
PJSIP是pjsip开源的一个免费和开源的多媒体通信库，用C语言编写，实现基于标准的协议，如SIP, SDP, RTP, STUN, TURN，和ICE。 PJSIP 2.16及之前版本存在缓冲区错误漏洞，该漏洞源于pjsip_multipart_parse函数存在越界读取，可能导致相邻堆内存泄露。
CVSS Information
N/A
Vulnerability Type
N/A