CVE-2026-116567

Prior to version 1.11.2 , FreeSWITCH is vulnerable to a pre-authentication stack buffer overflow in the mod_rtmp module. The vulnerability exists in the rtmp_handle_control() function, where an unbounded sprintf loop renders an RTMP user-control message into a 200-byte stack buffer. An attacker c...