{
"id": "GHSA-xqp8-79vm-66m9",
"aliases": [
"CVE-2021-43300"
],
"details": "Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.",
"affected": [],
"modified": "2025-11-04T18:30:37Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"published": "2022-02-17T00:00:27Z",
"references": [
{
"url": "https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9",
"type": "WEB"
},
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43300",
"type": "ADVISORY"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html",
"type": "WEB"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html",
"type": "WEB"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html",
"type": "WEB"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00030.html",
"type": "WEB"
},
{
"url": "https://www.debian.org/security/2022/dsa-5285",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-121",
"CWE-787"
],
"severity": "CRITICAL",
"github_reviewed": false,
"nvd_published_at": "2022-02-16T21:15:00Z",
"github_reviewed_at": null
}
}