Skip to content
Signalwire vulnerabilities
Newest
-
signalwire freeswitch
FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
CVE-2026-116782
7.5 High
-
signalwire freeswitch
FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
CVE-2026-116783
8.2 High
-
signalwire freeswitch
FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY
CVE-2026-116790
9.1 Critical
-
signalwire freeswitch
FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
CVE-2026-116788
8.2 High
-
signalwire freeswitch
FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing
CVE-2026-116780
2.7 Low
-
signalwire freeswitch
FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing
CVE-2026-116784
7.5 High
-
signalwire freeswitch
FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
CVE-2026-116779
Public exploit
9.8 Critical
-
signalwire freeswitch
FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
CVE-2026-116789
7.4 High
-
signalwire freeswitch
FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing
CVE-2026-116781
5.3 Medium
-
signalwire freeswitch
FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
CVE-2026-116785
9.1 Critical
-
signalwire freeswitch
FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
CVE-2026-116786
8.8 High
-
signalwire freeswitch
FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
CVE-2026-116787
7.5 High
-
signalwire freeswitch
FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
CVE-2026-116567
7.5 High
-
signalwire freeswitch
FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction
CVE-2026-116571
5.9 Medium
-
signalwire freeswitch
FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
CVE-2026-116570
7.5 High
-
signalwire freeswitch
FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing
CVE-2026-116569
7.5 High
-
signalwire freeswitch
FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing
CVE-2026-116568
7.5 High
-
signalwire freeswitch
FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name
CVE-2026-116572
6.5 Medium
-
signalwire freeswitch
FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls
CVE-2026-115928
7.5 High
-
signalwire freeswitch
FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences
CVE-2026-116574
5.9 Medium
-
signalwire freeswitch
FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user
CVE-2026-116573
6.5 Medium
-
signalwire libks
libks has path traversal in kws HTTP parser via URI segment overflow
CVE-2026-49846
7.5 High
-
freeswitch
FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`
CVE-2026-49848
4.3 Medium
-
freeswitch
FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON
CVE-2026-49847
7.5 High
-
freeswitch
FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`
CVE-2026-49843
5.3 Medium
-
freeswitch
FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames
CVE-2026-49842
7.5 High
-
freeswitch
FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read
CVE-2026-49841
9.8 Critical
-
freeswitch
FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing
CVE-2026-49840
9.1 Critical
-
freeswitch
FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing
CVE-2026-49475
7.5 High
-
freeswitch
FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat
CVE-2026-49472
5.3 Medium
-
freeswitch
Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion
CVE-2026-45771
7.5 High
-
freeswitch
FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
CVE-2023-51443
Fix available
7.5 High
-
freeswitch
FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names
CVE-2023-40019
7.5 High
-
freeswitch
FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID
CVE-2023-40018
7.5 High
-
freeswitch sofia-sip, debian linux +1 more
heap-over-flow and integer-overflow in sofia-sip
CVE-2023-32307
Fix available
7.5 High
-
freeswitch sofia-sip
heap-over-flow in stun_parse_attribute in sofia-sip
CVE-2023-22741
Fix available
9.8 Critical
-
freeswitch sofia-sip, debian linux +1 more
Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
CVE-2022-31003
Fix available
9.1 Critical
-
freeswitch sofia-sip, debian linux +1 more
Out-of-bounds Read in Sofia-SIP
CVE-2022-31002
Fix available
7.5 High
-
freeswitch sofia-sip, debian linux +1 more
Out-of-bounds Read in Sofia-SIP
CVE-2022-31001
Fix available
7.5 High
-
freeswitch
FreeSWITCH vulnerable to SIP digest leak for configured gateways
CVE-2021-41158
Fix available
5.8 Medium
-
freeswitch
FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default
CVE-2021-41157
Fix available
5.3 Medium
-
freeswitch
FreeSWITCH susceptible to Denial of Service via invalid SRTP packets
CVE-2021-41105
Fix available
7.5 High
-
freeswitch
FreeSWITCH susceptible to Denial of Service via SIP flooding
CVE-2021-41145
Fix available
8.6 High
-
freeswitch
FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing
CVE-2021-37624
Public exploitFix available
7.5 High
-
signalwire freeswitch
An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch...
CVE-2021-36513
7.5 High