Heap-based buffer overflow in freeswitch - CVE-2026-116785
Published: November 9, 2026
Vulnerability identifier: #VU162787
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-116785
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to corrupt heap memory and crash FreeSWITCH, terminating all concurrent sessions.
The vulnerability exists due to incorrect extended payload length conversion in the mod_xml_rpc WebSocket handler, allowing crafted lengths to bypass buffer bounds checks. An unauthenticated remote attacker can complete a WebSocket upgrade and send a malformed frame to trigger a heap buffer overflow when the module is loaded and its opt-in WebSocket endpoint is enabled.
Affected software
freeswitch
How to mitigate CVE-2026-116785
Install security update from vendor's website.
freeswitch - update to 1.11.2