CVE Intelligence

Pion Stun vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Pion Stun: 1 record(s), with affected versions and fixes.

CVE-2026-54909 Medium · 5.3 CWE-20 Jul 31, 2026
Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute
pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3.