Known vulnerabilities in freeswitch

Software: freeswitch
Software CPE: cpe:2.3:a:www.freeswitch.org:freeswitch:*:*:*:*:*:*:*:*
Total vulnerabilities: 20
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting freeswitch freeswitch is affected by 20 known vulnerabilities: 5 high, 13 medium, 2 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133321 - Out-of-bounds read
CVE-2026-49475
CWE-125 Medium
No
No
1.11.0 04.06.2026 SB2026051551
#VU133320 - Improper Encoding or Escaping of Output
CVE-2026-49472
CWE-116 Low
No
No
1.11.0 04.06.2026 SB2026051551
#VU133319 - Heap-based Buffer Overflow
CVE-2026-49840
CWE-122 High
No
No
1.11.1 04.06.2026 SB2026060412
#VU133317 - Heap-based Buffer Overflow
CVE-2026-49841
CWE-122 High
No
No
1.11.1 04.06.2026 SB2026060412
#VU133316 - Resource exhaustion
CVE-2026-49842
CWE-400 Medium
No
No
1.11.1 04.06.2026 SB2026060412
#VU133315 - Improper Authentication
CVE-2026-49843
CWE-287 Medium
No
No
1.11.1 04.06.2026 SB2026060412
#VU133314 - Uncontrolled Recursion
CVE-2026-49847
CWE-674 Medium
No
No
1.11.1 04.06.2026 SB2026060412
#VU133313 - Improper Authentication
CVE-2026-49848
CWE-287 Low
No
No
1.11.1 04.06.2026 SB2026060412
#VU131571 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2026-45771
CWE-776 Medium
No
No
1.11.0 15.05.2026 SB2026051551
#VU84798 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-51443
CWE-362 Medium
No
No
1.10.11 27.12.2023 SB2023122717
#VU131565 - Stack-based buffer overflow
CVE-2023-40019
CWE-121 Medium
No
No
1.10.10 13.09.2023 SB2023091376
#VU131564 - Out-of-bounds write
CVE-2023-40018
CWE-787 Medium
No
No
1.10.10 13.09.2023 SB2023091376
#VU57782 - Use of Hard-coded Credentials
CVE-2019-19492
CWE-798 High
Available
No
1.10.2 29.10.2021 SB2019120227
SB2021102908
#VU131566 - Improper Check or Handling of Exceptional Conditions
CVE-2021-41105
CWE-703 Medium
No
No
1.10.7 25.10.2021 SB2021102530
#VU131567 - Improper Authentication
CVE-2021-41157
CWE-287 Medium
No
No
1.10.7 25.10.2021 SB2021102530
#VU131568 - Improper Authentication
CVE-2021-37624
CWE-287 Medium
No
No
1.10.7 25.10.2021 SB2021102530
#VU131569 - Resource exhaustion
CVE-2021-41145
CWE-400 High
No
No
1.10.7 25.10.2021 SB2021102530
#VU131570 - Improper Access Control
CVE-2021-41158
CWE-284 Medium
No
No
1.10.7 25.10.2021 SB2021102530
#VU40644 - Heap-based Buffer Overflow
CVE-2015-7392
CWE-122 High
No
No
1.4.23, 1.6.2 05.10.2015 SB2015100510
#VU42513 - Memory corruption
CVE-2013-2238
CWE-119 Medium
No
No
- 01.10.2013 SB2013100113