PatchTheCVE: wernerdhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2013-2223: GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) ohttps://patchthecve.com/cve/CVE-2013-2223.htmlhttps://patchthecve.com/cve/CVE-2013-2223.htmlTue, 16 Jun 2026 23:52:58 +0000MEDIUM 5.8: GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function.CVE-2013-2222: Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of https://patchthecve.com/cve/CVE-2013-2222.htmlhttps://patchthecve.com/cve/CVE-2013-2222.htmlTue, 16 Jun 2026 23:52:58 +0000MEDIUM 6.8: Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ZRTP Hello packet to the (1) ZRtp::findBestSASType, (2) ZRtp::findBestAuthLen, (3) ZRtp::findBestCipher, (4) ZRtp::findBestHCVE-2013-2221: Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackhttps://patchthecve.com/cve/CVE-2013-2221.htmlhttps://patchthecve.com/cve/CVE-2013-2221.htmlTue, 16 Jun 2026 23:52:58 +0000HIGH 7.5: Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large packet.