CVE-2021-41141 - CVE House
Back to Database
Status published Medium CVE-2021-41141

Missing release of locks in PJSIP

Vulnerability Description

PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently held locks. This could result in a system deadlock, which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-41141

Credits & Attribution

No credits recorded in the NVD database.

References

More from pjsip

View All →
CVE-2025-65102
PJSIP is vulnerable to buffer overflow in Opus PLC
High 8.7
CVE-2023-38703
PJSIP has use-after-free vulnerability in SRTP media transport
Critical 9.8
CVE-2023-27585
PJSIP is a free and open source multimedia communication library...
High 7.5
CVE-2022-39269
Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip
Critical 9.1
CVE-2022-39244
Buffer overflow in pjlib scanner and pjmedia
High 7.5

Affected Vendor

Affected Software

pjproject
Vulnerable Versions:
<= 2.11.1

Timeline

Official Publish: January 4th, 2022
Last Modified: April 23rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-667

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.