Stack-based buffer overflow in freeswitch - CVE-2026-115928
Published: November 9, 2026
Vulnerability identifier: #VU162785
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-115928
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to crash FreeSWITCH and drop all calls handled by the process.
The vulnerability exists due to incorrect bounds handling in the SDP crypto parser, allowing a zero-length key and salt to trigger a stack buffer overflow. An unauthenticated remote attacker can send a crafted SIP INVITE offering SRTP to a profile accepting unauthenticated inbound calls, triggering memory corruption before the call is answered.
Affected software
freeswitch
How to mitigate CVE-2026-115928
Install security update from vendor's website.
freeswitch - update to 1.11.2