CVE-2026-57198

The Asterisk telephony toolkit is vulnerable to a T.140 RED heap buffer overflow when the chan_sip channel driver is installed and the textsupport option is enabled. An authenticated attacker can exploit this using carefully crafted packets, potentially leading to remote code execution or a syste...

CVE-2026-57198 Asterisk: Possible RED T.140 Heap Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The chansip channel...