pion vulnerabilities
7 published CVEs name pion among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54909
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute
pion · stun
Medium5.3 - CVE-2026-54908
Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message
pion · dtls
Medium6.3 - CVE-2026-26014
Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key
pion · dtls
Medium5.9 - CVE-2025-49140
Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)
pion · interceptor
High7.5 - CVE-2022-29222
Improper Certificate Validation in Pion DTLS
pion · dtls
Medium5.9 - CVE-2022-29189
Buffer for inbound DTLS fragments has no limit
pion · dtls
Medium5.3 - CVE-2022-29190
Header reconstruction method can be thrown into an infinite loop in Pion DTLS
pion · dtls
High7.5