CVE-2025-12205

A vulnerability was detected in Kamailio 5.5. The affected element is the function srpushyystate of the file src/core/cfg.lex of the component Configuration File Handler. The manipulation results in use after free. The attack must be initiated from a local position. The exploit is now public and...

Linux Distros Unpatched Vulnerability : CVE-2025-12207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Kamailio 5.5. This affects the function yyerrorat of the file src/core/cfg.y of the component Grammar Rule Handler. Such...

PT-2025-43862

Name of the Vulnerable Software and Affected Versions Kamailio version 5.5 Description A security issue exists in Kamailio 5.5 related to a heap-based buffer overflow. The issue is located in the rve destroy function within the src/core/rvalue.c file of the Configuration File Handler component...