CVE-2026-116783

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, udptlrxpacket used a peer-controlled FEC entry count directly to fill five-entry FEC arrays in a...

CVE-2026-116783

FreeSWITCH versions prior to 1.11.2 are vulnerable to an out-of-bounds write within the mod_spandsp module. The root cause is located in the udptl_rx_packet() function, which uses a peer-controlled FEC entry count to populate five-entry FEC arrays without sufficient validation. A larger count all...