CVE-2023-21468

Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission...

PT-2025-35661

Name of the Vulnerable Software and Affected Versions Telephony versions prior to SMR Apr-2023 Release 1 Description An improper access control issue exists in Telephony. This allows attackers to access files with escalated permission. Recommendations Update Telephony to SMR Apr-2023 Release 1 or...

Linux Distros Unpatched Vulnerability : CVE-2025-54995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can le...

CVE-2023-21468: Undefined Security Weakness

Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission...

CVE-2025-57767

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header wi...

CVE-2025-54995

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...

“No place in our networks”: FCC hangs up on thousands of voice operators in robocall war

Everyone hates robocalls. However, it's difficult to track down all the scammers and spammers that make them, so the Federal Communications Commission FCC has taken another approach: it just disconnected over a thousand voice operators from the public telephone network for not doing their part to...

MAL-2025-32848 Malicious code in scv-external-telephony-sfdx-app (npm)

The package scv-external-telephony-sfdx-app was found to contain malicious code...

Malicious code in scv-external-telephony-sfdx-app (npm)

The package scv-external-telephony-sfdx-app was found to contain malicious code...

[SECURITY] Fedora 42 Update: matrix-synapse-1.135.2-1.fc42

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

CVE-2025-49832 Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation

Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in asterisk/res/resstirshaken /verification.c that can be...

CVE-2025-49480

Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49492

Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmdserver/src/devapi.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49480 Out-of-bounds access in lte-telephony

Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49480

The CVE-2025-49480 issue is an out-of-bounds access in the lte-telephony component, specifically in the LzmaEnc.c file, affecting Falcon_Linux, Kestrel, and Lapwing_Linux (and ASR180x/ASR190x) prior to version 1536. The underlying cause is an out-of-bounds access in the LzmaEnc.c implementation. ...

CVE-2025-49480 Out-of-bounds access in lte-telephony

Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49492 Out-of-bounds write in lte-telephony

Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmdserver/src/devapi.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

CVE-2025-49492

CVE-2025-49492 describes an out-of-bounds write in the lte-telephony component of ASR180x, specifically in apps/atcmd_server/src/dev_api.C. The issue affects ASR180x before v1536 and also Falcon_Linux, Kestrel, and Lapwing_Linux before v1536. Root cause details are reported across multiple source...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from out-of-bounds access to the LzmaEnc.c file in lte-telephony...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from an out-of-bounds write to the devapi.C file in lte-telephony that could result in a buffer underflow...