CVE-2026-116568

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtmp2rtpH264 trusted the length prefix of each inbound H.264 NAL unit without checking it...

CVE-2026-116568

The FreeSWITCH software (versions prior to 1.11.2 ) contains an out-of-bounds read vulnerability in the mod_rtmp component. The root cause is located in the rtmp_rtmp2rtpH264() function, which fails to validate the length prefix of inbound H.264 NAL units against the bytes remaining in the RTMP m...

CVE-2026-116568 FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtmp2rtpH264 trusted the length prefix of each inbound H.264 NAL unit without checking it...

EUVD-2026-117735

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtmp2rtpH264 trusted the length prefix of each inbound H.264 NAL unit without checking it...