CVE-2026-57194

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 20.20.1 Asterisk versions prior to 21.12.3 Asterisk versions prior to 22.10.1 Asterisk versions prior to 23.4.1 Certified Asterisk versions prior to 20.7-cert11 Certified Asterisk versions prior to 22.8-cert3

Description An out-of-bounds write occurs in the chan unistim module during DIALPAGE digit handling, which can overflow the phone number field and cause the system to crash when a specially crafted incoming request packet is sent. This requires the chan unistim module to be loaded and configured with a reachable UNISTIM UDP port. Additionally, the attacker must register as a configured phone MAC or utilize a production/autoprovisioning path that grants access to the main page.

Recommendations Update to version 20.20.1 Update to version 21.12.3 Update to version 22.10.1 Update to version 23.4.1 Update to Certified Asterisk version 20.7-cert11 Update to Certified Asterisk version 22.8-cert3 As a temporary mitigation, restrict access to the UNISTIM UDP port or disable the chan unistim module if not required.