CVE-2026-57188

Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 20.20.1 Asterisk versions prior to 21.12.3 Asterisk versions prior to 22.10.1 Asterisk versions prior to 23.4.1 Certified Asterisk versions prior to 20.7-cert11 Certified Asterisk versions prior to 22.8-cert3

Description An authenticated attacker can trigger a stack buffer overflow in the res xmpp module during the handling of the XMPP namespace prefix using specially crafted packets. This occurs when the res xmpp module is loaded, an XMPP connection is configured in xmpp.conf, and the attacker possesses an XMPP account on the same or a federated server.

Recommendations Update to version 20.20.1 Update to version 21.12.3 Update to version 22.10.1 Update to version 23.4.1 Update to Certified Asterisk version 20.7-cert11 Update to Certified Asterisk version 22.8-cert3 As a temporary workaround, consider disabling the res xmpp module to minimize the risk of exploitation.