PT-2026-127239

CVE-2026-57191

·

Published

2026-10-27

·

Updated

2026-10-27

Description by

CVSS 4.0
8.2
High
MetricsAV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in res pjsip pubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated attacker to send a carefully crafted packet that causes a stack buffer overflow and corrupts the underlying transport, permanently disabling all SIP functionality. An Asterisk restart is required to restore full operation. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2026-57191
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com