CVE-2021-43302

2022-02-1600:00:00

CWE-125

JFROG

www.cve.org

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

JSON

Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled ‘filename’ argument may cause an out-of-bounds read when the filename is shorter than 4 characters.

CNA Affected

[
  {
    "vendor": "teluu",
    "product": "pjsip",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThanOrEqual": "2.11.1",
        "versionType": "custom"
      }
    ]
  }
]