CVE-2022-24763

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-835"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24763.json"
}

References

Affected packages

Git / github.com/pjsip/pjproject

Affected ranges

Type

GIT

Repo

https://github.com/pjsip/pjproject

Events

Introduced

d532ae37883f60ae987fedc8e0969bcc37d299a1

Fixed

43c745789d291496fe1c3ed8a2c0dd6305260b32

Fixed

856f87c2e97a27b256482dbe0d748b1194355a21

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.5"
                },
                {
                    "fixed":  "2.13"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "856f87c2e97a27b256482dbe0d748b1194355a21"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-24763.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "23112874292123438721122673683301241166",
            "length":  2419
        },
        "id":  "CVE-2022-24763-010f5c90",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/pjsip/pjproject/commit/856f87c2e97a27b256482dbe0d748b1194355a21",
        "target":  {
            "file":  "pjlib-util/src/pjlib-util/xml.c",
            "function":  "xml_parse_node"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "298137472848914754553705263002548042059",
                "256854082399797273380735969700505730638",
                "151671903702646675619882133541944850855",
                "166700460298304986497664136193760399315"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2022-24763-1d35935b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/pjsip/pjproject/commit/856f87c2e97a27b256482dbe0d748b1194355a21",
        "target":  {
            "file":  "pjlib-util/src/pjlib-util/xml.c"
        }
    }
]

vanir_signatures_modified

"2026-10-16T08:55:31Z"