Potential out-of-bound read/write when parsing RTCP FB RPSI
Package
No package listed
Affected versions
2.12 or lower
Patched versions
2.12.1 or later
Description
Credits
-
Cossack9989 Analyst
Cossack9989
Analyst
Impact
Currently PJSIP doesn't parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected.
Patches
The patch is available as commit 11559e4 in the master branch.
For more information
If you have any questions or comments about this advisory:
Email us at security@pjsip.org