CVE-2026-116571

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtp2rtmpH264 built an AVC decoder configuration record in a fixed stack buffer by copying...

CVE-2026-116571

The FreeSWITCH telecom stack contains a stack buffer overflow in the mod_rtmp module, specifically within the rtmp_rtp2rtmpH264() function. The vulnerability occurs because the software copies wire-derived SPS and PPS values into a fixed stack buffer without verifying that the sizes and framing f...