CVE-2026-116569

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, msrpparsebuffer subtracted delimiter framing from a peer-controlled short segment whose MSRP byte...

CVE-2026-116569 FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, msrpparsebuffer subtracted delimiter framing from a peer-controlled short segment whose MSRP byte...

CVE-2026-116569

The FreeSWITCH software (versions prior to 1.11.2 ) contains a pre-authentication out-of-bounds write vulnerability within the msrp_parse_buffer() function. The flaw occurs because the system subtracts delimiter framing from a peer-controlled short segment without verifying the segment's length. ...

CVE-2026-116569 FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, msrpparsebuffer subtracted delimiter framing from a peer-controlled short segment whose MSRP byte...