Skip to content

ICE session use-after-free race conditions

High
sauwming published GHSA-g88q-c2hm-q7p7 Mar 10, 2026

Package

No package listed

Affected versions

2.16 or lower

Patched versions

2.17

Description

A heap use-after-free vulnerability exists in PJSIP's ICE session that occurs when there are race conditions between session destruction and the callbacks.

Impact

Any PJSIP application that uses ICE is potentially affected.

Patches

The patch is available as commit c9caced in the master branch.

Severity

High

CVE ID

CVE-2026-32942

Weaknesses

No CWEs

Credits