THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-34rh-wp3j-6cxc (medium) — Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

[GHSA] GHSA-34rh-wp3j-6cxc (medium) — Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

medgithub_advisoriesPublished 2026-07-31

GHSA-34rh-wp3j-6cxc Severity: medium CVE: CVE-2026-54909

Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

### Impact Remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

### Patches Upgrade to v3.1.5 or later. This version includes this patch https://github.com/pion/stun/pull/278 which fixes th

Indicators of compromise

CVE-2026-54909cve

Original source: https://github.com/advisories/GHSA-34rh-wp3j-6cxc