CVE-2026-57199

The Asterisk open source private branch exchange and telephony toolkit is vulnerable to memory corruption or a crash due to an out-of-bounds write. In versions prior to 20.20.1 , 21.12.3 , 22.10.1 , 23.4.1 , and Certified Asterisk 20.7-cert11 , 22.8-cert3 , the app_sms.c component copies external...

CVE-2026-57199 Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, appsms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing a...