PJSIP Out-of-Bounds Read Vulnerability in SIP Multipart Message Parsing

A vulnerability in PJSIP versions through 2.16 allows for an out-of-bounds read when handling a malformed Content-ID URI within SIP multipart message bodies. This issue arises from inadequate length validation, which can lead to reading data beyond the intended buffer limits.

Impact

Exploitation of this vulnerability could result in out-of-bounds read, potentially leading to memory corruption or disclosure of sensitive information.

Remediation

Users can upgrade to PJSIP version 2.17, where this vulnerability has been fixed.