Asterisk Certified-asterisk vulnerabilities

• asterisk, asterisk certified-asterisk +1 more Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers CVE-2026-57199 Fix available 2.3 LowOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location CVE-2026-57203 Fix available 6.9 MediumOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field CVE-2026-57190 Fix available 7.0 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing CVE-2026-57191 Fix available 8.2 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch CVE-2026-57192 Fix available 6.0 MediumOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser CVE-2026-57186 Fix available 7.5 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE CVE-2026-57200 Fix available 7.5 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication CVE-2026-57195 Fix available 7.5 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes CVE-2026-57202 Fix available 8.1 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling CVE-2026-57188 Fix available 7.1 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Possible RED T.140 Generation Accumulation OOB Write CVE-2026-57189 Fix available 2.3 LowOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer CVE-2026-57201 Fix available 7.5 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk CVE-2026-57194 Fix available 5.9 MediumOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Possible RED T.140 Heap Buffer Overflow CVE-2026-57198 Fix available 2.3 LowOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser CVE-2026-57185 Fix available 6.5 MediumOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) CVE-2026-57197 Fix available 7.7 HighOctober 27, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) CVE-2026-57184 Fix available 6.3 MediumOctober 26, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) CVE-2026-57193 Fix available 6.9 MediumOctober 26, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing CVE-2026-57187 Fix available 7.1 HighOctober 26, 2026
• asterisk, asterisk certified-asterisk +1 more Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages CVE-2026-57196 Fix available 2.3 LowOctober 26, 2026