PJSIP Integer Overflow Vulnerability in Media Stream Buffer Size Calculation

An integer overflow vulnerability has been identified in PJSIP versions through 2.16, specifically in the media stream component. The issue arises when processing Session Description Protocol (SDP) with asymmetric 'ptime' configurations, leading to an incorrect buffer size allocation. This miscalculation can cause memory corruption or unexpected application crashes.

Impact

Exploitation of this vulnerability can result in memory corruption or unintended application termination.

Remediation

Users can upgrade to PJSIP version 2.17, where this vulnerability has been fixed.