CVE-2026-57191

Asterisk is vulnerable to a stack buffer overflow in res_pjsip_pubsub.c due to an unbounded sscanf with %s conversion. An unauthenticated attacker can send a crafted SIP NOTIFY packet with an oversized message-summary body field, triggering a 901-byte out-of-bounds write that corrupts the stack m...