CVE-2026-57188High· 7.1▾ TwilightAsterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in res_xmpp XMPP namespace prefix handling using carefully crafted packets. The res_xmpp module must be loaded, an XMPP connection must be configured in xmpp.conf, and the attacker must have an XMPP account on the same or a federated server. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
asterisk < 20.20.1asterisk >= 21.0.0-pre1, < 21.12.3asterisk >= 22.0.0-pre1, < 22.10.1asterisk >= 23.0.0-pre1, < 23.4.1certified-asterisk < 20.7-cert11certified-asterisk >= 22.8-cert1-pre1, < 22.8-cert3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-57197High· 7.7Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
CVE-2026-57194Medium· 5.9Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
CVE-2026-57201High· 7.5Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
CVE-2026-57189Low· 2.3Asterisk: Possible RED T.140 Generation Accumulation OOB Write
CVE-2026-57202High· 8.1Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
CVE-2026-57185Medium· 6.5Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser