agentprime: signalwire-freeswitchEvery new CVE for signalwire-freeswitch.https://agentprime.io/CVE-2026-116782: FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handlinghttps://agentprime.io/advisories/CVE-2026-116782/https://agentprime.io/advisories/CVE-2026-116782/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:42:40 GMTCVECVE-2026-116783: FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery datahttps://agentprime.io/advisories/CVE-2026-116783/https://agentprime.io/advisories/CVE-2026-116783/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:41:44 GMTCVECVE-2026-116790: FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITYhttps://agentprime.io/advisories/CVE-2026-116790/https://agentprime.io/advisories/CVE-2026-116790/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:40:51 GMTCVEcriticalCVE-2026-116788: FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decodinghttps://agentprime.io/advisories/CVE-2026-116788/https://agentprime.io/advisories/CVE-2026-116788/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:39:44 GMTCVECVE-2026-116780: FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicinghttps://agentprime.io/advisories/CVE-2026-116780/https://agentprime.io/advisories/CVE-2026-116780/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:34:21 GMTCVECVE-2026-116784: FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsinghttps://agentprime.io/advisories/CVE-2026-116784/https://agentprime.io/advisories/CVE-2026-116784/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:31:12 GMTCVECVE-2026-116779: FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandshttps://agentprime.io/advisories/CVE-2026-116779/https://agentprime.io/advisories/CVE-2026-116779/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:30:25 GMTCVEcriticalCVE-2026-116789: FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serverhttps://agentprime.io/advisories/CVE-2026-116789/https://agentprime.io/advisories/CVE-2026-116789/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:29:17 GMTCVECVE-2026-116781: FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsinghttps://agentprime.io/advisories/CVE-2026-116781/https://agentprime.io/advisories/CVE-2026-116781/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:28:09 GMTCVECVE-2026-116785: FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handlinghttps://agentprime.io/advisories/CVE-2026-116785/https://agentprime.io/advisories/CVE-2026-116785/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:26:13 GMTCVEcriticalCVE-2026-116786: FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofiahttps://agentprime.io/advisories/CVE-2026-116786/https://agentprime.io/advisories/CVE-2026-116786/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:25:23 GMTCVECVE-2026-116787: FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Lengthhttps://agentprime.io/advisories/CVE-2026-116787/https://agentprime.io/advisories/CVE-2026-116787/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:24:15 GMTCVECVE-2026-116567: FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handlinghttps://agentprime.io/advisories/CVE-2026-116567/https://agentprime.io/advisories/CVE-2026-116567/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:23:25 GMTCVECVE-2026-116571: FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header constructionhttps://agentprime.io/advisories/CVE-2026-116571/https://agentprime.io/advisories/CVE-2026-116571/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:22:22 GMTCVECVE-2026-116570: FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationhttps://agentprime.io/advisories/CVE-2026-116570/https://agentprime.io/advisories/CVE-2026-116570/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:21:30 GMTCVECVE-2026-116569: FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsinghttps://agentprime.io/advisories/CVE-2026-116569/https://agentprime.io/advisories/CVE-2026-116569/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:20:43 GMTCVECVE-2026-116568: FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsinghttps://agentprime.io/advisories/CVE-2026-116568/https://agentprime.io/advisories/CVE-2026-116568/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:19:52 GMTCVECVE-2026-116572: FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-namehttps://agentprime.io/advisories/CVE-2026-116572/https://agentprime.io/advisories/CVE-2026-116572/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:19:04 GMTCVECVE-2026-115928: FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound callshttps://agentprime.io/advisories/CVE-2026-115928/https://agentprime.io/advisories/CVE-2026-115928/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:15:12 GMTCVECVE-2026-116574: FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequenceshttps://agentprime.io/advisories/CVE-2026-116574/https://agentprime.io/advisories/CVE-2026-116574/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:00:26 GMTCVECVE-2026-116573: FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header userhttps://agentprime.io/advisories/CVE-2026-116573/https://agentprime.io/advisories/CVE-2026-116573/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:59:40 GMTCVECVE-2026-49848: FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`https://agentprime.io/advisories/CVE-2026-49848/https://agentprime.io/advisories/CVE-2026-49848/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:05:42 GMTCVECVE-2026-49847: FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSONhttps://agentprime.io/advisories/CVE-2026-49847/https://agentprime.io/advisories/CVE-2026-49847/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:05:08 GMTCVECVE-2026-49843: FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`https://agentprime.io/advisories/CVE-2026-49843/https://agentprime.io/advisories/CVE-2026-49843/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:04:55 GMTCVECVE-2026-49842: FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frameshttps://agentprime.io/advisories/CVE-2026-49842/https://agentprime.io/advisories/CVE-2026-49842/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:02:58 GMTCVECVE-2026-49841: FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body readhttps://agentprime.io/advisories/CVE-2026-49841/https://agentprime.io/advisories/CVE-2026-49841/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:02:24 GMTCVEcriticalCVE-2026-49840: FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsinghttps://agentprime.io/advisories/CVE-2026-49840/https://agentprime.io/advisories/CVE-2026-49840/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:00:56 GMTCVEcriticalCVE-2026-49475: FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsinghttps://agentprime.io/advisories/CVE-2026-49475/https://agentprime.io/advisories/CVE-2026-49475/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:00:32 GMTCVECVE-2026-49472: FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpathttps://agentprime.io/advisories/CVE-2026-49472/https://agentprime.io/advisories/CVE-2026-49472/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 15:59:49 GMTCVECVE-2026-45771: Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansionhttps://agentprime.io/advisories/CVE-2026-45771/https://agentprime.io/advisories/CVE-2026-45771/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 15:51:49 GMTCVECVE-2023-51443: FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiationhttps://agentprime.io/advisories/CVE-2023-51443/https://agentprime.io/advisories/CVE-2023-51443/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Dec 2023 16:30:48 GMTCVECVE-2023-40019: FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec nameshttps://agentprime.io/advisories/CVE-2023-40019/https://agentprime.io/advisories/CVE-2023-40019/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Sep 2023 19:34:32 GMTCVECVE-2023-40018: FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component IDhttps://agentprime.io/advisories/CVE-2023-40018/https://agentprime.io/advisories/CVE-2023-40018/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Sep 2023 19:32:19 GMTCVECVE-2021-41158: FreeSWITCH vulnerable to SIP digest leak for configured gatewayshttps://agentprime.io/advisories/CVE-2021-41158/https://agentprime.io/advisories/CVE-2021-41158/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Oct 2021 13:55:10 GMTCVECVE-2021-41157: FreeSWITCH does not authenticate SIP SUBSCRIBE requests by defaulthttps://agentprime.io/advisories/CVE-2021-41157/https://agentprime.io/advisories/CVE-2021-41157/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Oct 2021 13:35:10 GMTCVECVE-2021-41105: FreeSWITCH susceptible to Denial of Service via invalid SRTP packetshttps://agentprime.io/advisories/CVE-2021-41105/https://agentprime.io/advisories/CVE-2021-41105/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Oct 2021 22:05:16 GMTCVECVE-2021-41145: FreeSWITCH susceptible to Denial of Service via SIP floodinghttps://agentprime.io/advisories/CVE-2021-41145/https://agentprime.io/advisories/CVE-2021-41145/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Oct 2021 22:05:11 GMTCVECVE-2021-37624: FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofinghttps://agentprime.io/advisories/CVE-2021-37624/https://agentprime.io/advisories/CVE-2021-37624/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Oct 2021 16:10:10 GMTCVE