CVE-2026-116574

FreeSWITCH versions prior to 1.11.2 are vulnerable to an off-by-one heap write due to a flaw in the switch_xml_ampencode() function. The software fails to reserve sufficient space for a terminating NUL character when handling the widest numeric character reference from a four-byte UTF-8 sequence....