Signalwire Freeswitch vulnerabilities

• signalwire freeswitch FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling CVE-2026-116782 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data CVE-2026-116783 8.2 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY CVE-2026-116790 9.1 CriticalNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding CVE-2026-116788 8.2 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing CVE-2026-116780 2.7 LowNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing CVE-2026-116784 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands CVE-2026-116779 Public exploit 9.8 CriticalNovember 5, 2026
• signalwire freeswitch FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server CVE-2026-116789 7.4 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing CVE-2026-116781 5.3 MediumNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling CVE-2026-116785 9.1 CriticalNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia CVE-2026-116786 8.8 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length CVE-2026-116787 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling CVE-2026-116567 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction CVE-2026-116571 5.9 MediumNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication CVE-2026-116570 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing CVE-2026-116569 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing CVE-2026-116568 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name CVE-2026-116572 6.5 MediumNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls CVE-2026-115928 7.5 HighNovember 5, 2026
• signalwire freeswitch FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences CVE-2026-116574 5.9 MediumNovember 5, 2026
• signalwire freeswitch FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user CVE-2026-116573 6.5 MediumNovember 5, 2026
• freeswitch FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto` CVE-2026-49848 4.3 MediumJune 9, 2026
• freeswitch FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON CVE-2026-49847 7.5 HighJune 9, 2026
• freeswitch FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` CVE-2026-49843 5.3 MediumJune 9, 2026
• freeswitch FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames CVE-2026-49842 7.5 HighJune 9, 2026
• freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read CVE-2026-49841 9.8 CriticalJune 9, 2026
• freeswitch FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing CVE-2026-49840 9.1 CriticalJune 9, 2026
• freeswitch FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing CVE-2026-49475 7.5 HighJune 9, 2026
• freeswitch FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat CVE-2026-49472 5.3 MediumJune 9, 2026
• freeswitch Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion CVE-2026-45771 7.5 HighJune 9, 2026
• freeswitch FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation CVE-2023-51443 Fix available 7.5 HighDecember 27, 2023
• freeswitch FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names CVE-2023-40019 7.5 HighSeptember 15, 2023
• freeswitch FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID CVE-2023-40018 7.5 HighSeptember 15, 2023
• freeswitch FreeSWITCH vulnerable to SIP digest leak for configured gateways CVE-2021-41158 Fix available 5.8 MediumOctober 26, 2021
• freeswitch FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default CVE-2021-41157 Fix available 5.3 MediumOctober 26, 2021
• freeswitch FreeSWITCH susceptible to Denial of Service via invalid SRTP packets CVE-2021-41105 Fix available 7.5 HighOctober 25, 2021
• freeswitch FreeSWITCH susceptible to Denial of Service via SIP flooding CVE-2021-41145 Fix available 8.6 HighOctober 25, 2021
• freeswitch FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing CVE-2021-37624 Public exploitFix available 7.5 HighOctober 25, 2021
• signalwire freeswitch An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch... CVE-2021-36513 7.5 HighOctober 18, 2021