libpjsip.so is vulnerable to information disclosure. The vulnerability exists during packet processing in the function srtp_rtp_cb
in transport_srtp.c
because PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart which allows an attacker to gain access to information of insecurely transmitted plain texts.