Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-57164— PJSIP: Heap overflow in the HTTP client

Quick assessment

Affected
pjsip pjproject
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PJSIP 是一个用 C 语言编写的免费且开源的多媒体通信库。在提交 8d5956a 之前，PJLIB-UTIL 的 HTTP 客户端（http_client.c）在缓冲 HTTP 响应体时存在堆缓冲区溢出漏洞。该漏洞影响那些使用 PJLIB-UTIL HTTP 客户端一次性接收完整响应体的应用程序（即只使用完成回调，而不使用增量式的 on_data_read 回调的应用程序）。在扩展响应缓冲区时，基于服务器提供的 Content-Length 进行的错误大小计算可能导致缓冲区过小，从而使响应数据被写入到已分配内存

CVSS 8.3 · High

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
pjsip pjproject < 8d5956afab2ede95ddb199078dc19a8ac0114f3d affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57164

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PJSIP: Heap overflow in the HTTP client
Source: CVE Program / CVE List V5
Vulnerability Description
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client (http_client.c) when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole response body at once (a completion callback with no incremental on_data_read callback). When growing the response buffer, an incorrect size calculation based on the server-supplied Content-Length can leave the buffer too small, causing response data to be written past the end of the allocation. A malicious or man-in-the-middle HTTP server can trigger this with a crafted response; impact may range from unexpected application termination to memory corruption. Applications that consume the response incrementally (via on_data_read), or that only connect to trusted servers, are not affected. This issue has been patched via commit 8d5956a.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
pjsip pjproject < 8d5956afab2ede95ddb199078dc19a8ac0114f3d -

II. Public POCs for CVE-2026-57164

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57164

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-57164 (1)

Vendor Advisories for CVE-2026-57164 (1)

Same Patch Batch · pjsip · 2026-09-04 · 8 CVEs total

CVE-2026-57163 8.8 HIGH PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend
CVE-2026-57162 8.8 HIGH PJSIP: Stack overflow parsing SDP a=crypto attributes
CVE-2026-57161 8.8 HIGH PJSIP: Stack overflow handling Service-Route headers in a registration response
CVE-2026-57159 8.4 HIGH PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance
CVE-2026-57160 6.9 MEDIUM PJSIP: SIP message header buffer overflow
CVE-2026-57165 6.3 MEDIUM PJSIP: Pre-authentication overflow in the telnet CLI history
CVE-2026-57166 6.3 MEDIUM PJSIP: Pre-authentication overflow in the telnet CLI error

IV. Related Vulnerabilities

Same product: pjproject
Same vendor: pjsip
Same weakness: CWE-122

V. Comments for CVE-2026-57164

No comments yet

Leave a comment