CVE-2026-57192

Asterisk, an open source telephony toolkit, is vulnerable to a heap buffer overflow via an out-of-bounds write in the Codec2 decoder. This vulnerability is caused by a floor/ceil sample-count mismatch when the codec_codec2 module is loaded and Codec2 is configured on an endpoint. An authenticated...