CVE-2026-29068
asterisk: PJSIP is a free and open source multimedia communication library written in C
CVE-2026-29068 is fixed in asterisk on 1 platform by DEBIAN-CVE-2026-29068 (version 1:22.10.0+dfsg+~cs6.17.60671434-1), released March 6, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0036
30th percentile
PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| asterisk · Debian 14 | 1:22.10.0+dfsg+~cs6.17.60671434-1 | DEBIAN-CVE-2026-29068 | Mar 6, 2026 |