[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fd__KT0OjjI_cEqb0UbPURUa0HWIngofvDxh9ZIruc4E":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":80,"topProductsByCves":81,"seoMetadata":83,"meta":92},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},31443,"teluu",1,26,0,61,"2023-10-06","t",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},161769,"pjsip","Teluu is a technology vendor with 1 tracked product and 26 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,37,43,49,56,62,66,70,75],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2021-37706","PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.","2021-12-22",7.3,"v3.1","High",false,0.04924,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":36},"CVE-2022-21723","PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the `master` branch. There are no known workarounds.","2022-01-27",9.1,"Critical",0.04357,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":42},"CVE-2022-23608","PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set (or forking) scenario, a hash key shared by multiple UAC dialogs can potentially be prematurely freed when one of the dialogs is destroyed . The issue may cause a dialog set to be registered in the hash table multiple times (with different hash keys) leading to undefined behavior such as dialog list collision which eventually leading to endless loop. A patch is available in commit db3235953baa56d2fb0e276ca510fefca751643f which will be included in the next release. There are no known workarounds for this issue.","2022-02-22",8.1,0.04022,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":48},"CVE-2021-43845","PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.","2021-12-27",8.2,0.03622,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":35,"isKev":28,"epssScore":55},"CVE-2017-16872","An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, port, etc.) all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted back to strings, a buffer overrun. This will lead to a potential exploit using carefully crafted invalid values.","2017-11-17",9.8,"v3.0",0.03466,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":54,"severity":27,"isKev":28,"epssScore":61},"CVE-2018-1000099","Teluu PJSIP version 2.7.1 and earlier contains a Access of Null\u002FUninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2.","2018-03-13",7.5,0.03393,{"cveId":63,"description":64,"publishedDate":52,"cvssScore":60,"cvssVersion":54,"severity":27,"isKev":28,"epssScore":65},"CVE-2017-16875","An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.",0.03362,{"cveId":67,"description":68,"publishedDate":59,"cvssScore":60,"cvssVersion":54,"severity":27,"isKev":28,"epssScore":69},"CVE-2018-1000098","Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2.",0.03319,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":53,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":74},"CVE-2021-43299","Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.","2022-02-16",0.02493,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":60,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":79},"CVE-2022-24764","PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API `pjmedia_sdp_print(), pjmedia_sdp_media_print()`. Applications that do not use PJSUA2 and do not directly call `pjmedia_sdp_print()` or `pjmedia_sdp_media_print()` should not be affected. A patch is available on the `master` branch of the `pjsip\u002Fpjproject` GitHub repository. There are currently no known workarounds.","2022-03-22",0.02376,[],[82],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Teluu - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Teluu covering 1 product with 26 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Teluu vulnerabilities, Teluu security, Teluu CVE, Teluu threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":88,"@type":89,"name":90,"description":85,"url":91},"https:\u002F\u002Fschema.org","Organization","Teluu","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fteluu",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":93,"apiVersion":94},"2026-10-19T23:01:58.040Z","3.0"]