Stack-based buffer overflow in freeswitch - CVE-2026-116571
Published: November 9, 2026
Vulnerability identifier: #VU162782
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-116571
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to crash FreeSWITCH and terminate all active calls.
The vulnerability exists due to missing bounds checks when the explicitly enabled mod_rtmp module builds AVC sequence headers from H.264 parameter sets during RTP-to-RTMP bridging. An unauthenticated remote attacker can send oversized parameter sets over an established call to an RTMP endpoint, subject to deployment-specific call authentication, overflowing a stack buffer and triggering process termination on stack-protected builds.
Affected software
freeswitch
How to mitigate CVE-2026-116571
Install security update from vendor's website.
freeswitch - update to 1.11.2