Lucene search

Veracode Vulnerability DatabaseVERACODE:35522

HistoryMay 14, 2022 - 7:57 p.m.

Out-of-Bounds Read And Write

2022-05-1419:57:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

pjproject

software

vulnerability

out-of-bounds

read

write

pjmedia_rtcp_fb_parse_rpsi

parsing

rtcp

feedback

rpsi

EPSS

0.008

Percentile

81.8%

JSON

pjproject is vulnerable to out-of-bounds read and write. An attacker is able to cause out-of-bounds read/write via pjmedia_rtcp_fb_parse_rpsi function, when parsing incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet.

References

github.com/pjsip/pjproject/commit/11559e49e65bdf00922ad5ae28913ec6a198d508

github.com/pjsip/pjproject/security/advisories/GHSA-vhxv-phmx-g52q

lists.debian.org/debian-lts-announce/2022/11/msg00021.html

secdb.alpinelinux.org/edge/main.yaml

security.gentoo.org/glsa/202210-37

www.debian.org/security/2022/dsa-5285

EPSS

0.008

Percentile

81.8%

JSON

Related for VERACODE:35522