The multi-part body parser in PJSIP as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 Certified Asterisk 13.13 before 13.13-cert4 and other products allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.