CVE-2026-115928

A flaw was found in FreeSWITCH. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Description Protocol SDP message containing a zero-length key and salt in the crypto attribute. This triggers an integer underflow that overflows a stack buffer with decoded...