CVE-2026-115928

Prior to version 1.11.2 , FreeSWITCH is vulnerable to a stack buffer overflow when parsing the SDP a=crypto attribute on inbound calls. The root cause is located in the switch_core_media_add_crypto() function, where passing a zero-length key and salt from the attribute causes an integer underflow...