Lucene search
+L

6 matches found

osv_debian
osv_debian
•added 2026/10/27 5:17 p.m.•6 views

DEBIAN-CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

7.7CVSS6.3AI score0.00531EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/27 5:17 p.m.•8 views

CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

7.7CVSS0.00531EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2026/10/27 4:35 p.m.•18 views

CVE-2026-57197 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

7.7CVSS0.00531EPSS
SaveExploits0References15
osv_cve
osv_cve
•added 2026/10/27 4:35 p.m.•3 views

CVE-2026-57197 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

7.7CVSS6.3AI score
SaveExploits0References17
EUVD
EUVD
•added 2026/10/27 4:35 p.m.•2 views

EUVD-2026-111110

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

7.7CVSS6.3AI score0.00531EPSS
SaveExploits0References15
CVE
CVE
•added 2026/10/27 4:35 p.m.•6 views

CVE-2026-57197

Asterisk, an open source telephony toolkit, contains a heap buffer overflow vulnerability in the format_ogg_speex component. The root cause is an unbounded memcpy of OGG/Speex packet data when the software processes a file containing corrupted Speex audio. If triggered, this vulnerability can cau...

7.7CVSS6.3AI score0.00531EPSS
SaveExploits0References15
Rows per page
Query Builder