agentprime: certified-asteriskEvery new CVE for certified-asterisk.https://agentprime.io/CVE-2026-57199: Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffershttps://agentprime.io/advisories/CVE-2026-57199/https://agentprime.io/advisories/CVE-2026-57199/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:52:42 GMTCVECVE-2026-57203: Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper locationhttps://agentprime.io/advisories/CVE-2026-57203/https://agentprime.io/advisories/CVE-2026-57203/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:48:40 GMTCVECVE-2026-57190: Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Fieldhttps://agentprime.io/advisories/CVE-2026-57190/https://agentprime.io/advisories/CVE-2026-57190/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:45:50 GMTCVECVE-2026-57191: Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsinghttps://agentprime.io/advisories/CVE-2026-57191/https://agentprime.io/advisories/CVE-2026-57191/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:32:23 GMTCVECVE-2026-57192: Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatchhttps://agentprime.io/advisories/CVE-2026-57192/https://agentprime.io/advisories/CVE-2026-57192/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:25:40 GMTCVECVE-2026-57186: Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserhttps://agentprime.io/advisories/CVE-2026-57186/https://agentprime.io/advisories/CVE-2026-57186/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:21:55 GMTCVECVE-2026-57200: Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCEhttps://agentprime.io/advisories/CVE-2026-57200/https://agentprime.io/advisories/CVE-2026-57200/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:13:03 GMTCVECVE-2026-57195: Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authenticationhttps://agentprime.io/advisories/CVE-2026-57195/https://agentprime.io/advisories/CVE-2026-57195/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:04:25 GMTCVECVE-2026-57202: Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writeshttps://agentprime.io/advisories/CVE-2026-57202/https://agentprime.io/advisories/CVE-2026-57202/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:58:46 GMTCVECVE-2026-57188: Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlinghttps://agentprime.io/advisories/CVE-2026-57188/https://agentprime.io/advisories/CVE-2026-57188/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:55:29 GMTCVECVE-2026-57189: Asterisk: Possible RED T.140 Generation Accumulation OOB Writehttps://agentprime.io/advisories/CVE-2026-57189/https://agentprime.io/advisories/CVE-2026-57189/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:59:46 GMTCVECVE-2026-57201: Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Bufferhttps://agentprime.io/advisories/CVE-2026-57201/https://agentprime.io/advisories/CVE-2026-57201/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:56:37 GMTCVECVE-2026-57194: Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asteriskhttps://agentprime.io/advisories/CVE-2026-57194/https://agentprime.io/advisories/CVE-2026-57194/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:52:47 GMTCVECVE-2026-57198: Asterisk: Possible RED T.140 Heap Buffer Overflowhttps://agentprime.io/advisories/CVE-2026-57198/https://agentprime.io/advisories/CVE-2026-57198/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:47:20 GMTCVECVE-2026-57185: Asterisk: Buffer over-read in Asterisk PJSIP MWI body parserhttps://agentprime.io/advisories/CVE-2026-57185/https://agentprime.io/advisories/CVE-2026-57185/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:40:27 GMTCVECVE-2026-57197: Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)https://agentprime.io/advisories/CVE-2026-57197/https://agentprime.io/advisories/CVE-2026-57197/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:35:59 GMTCVECVE-2026-57184: Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)https://agentprime.io/advisories/CVE-2026-57184/https://agentprime.io/advisories/CVE-2026-57184/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:53:10 GMTCVECVE-2026-57193: Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)https://agentprime.io/advisories/CVE-2026-57193/https://agentprime.io/advisories/CVE-2026-57193/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:46:01 GMTCVECVE-2026-57187: Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processinghttps://agentprime.io/advisories/CVE-2026-57187/https://agentprime.io/advisories/CVE-2026-57187/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:31:52 GMTCVECVE-2026-57196: Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pageshttps://agentprime.io/advisories/CVE-2026-57196/https://agentprime.io/advisories/CVE-2026-57196/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:27:35 GMTCVE