CVE-2026-116572

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions 1.10.0 through 1.11.1

Description A stack-based buffer overflow exists in the mod sofia module when processing SIP Contact display names for dialog-event notifications. A remote peer can establish a dialog with an excessively long display name and subscribe to dialog events, causing the stored value to overflow a fixed 512-byte stack buffer. This can lead to the termination of the process and all active calls. Successful exploitation requires presence management to be enabled and typically requires valid profile credentials, unless subscription authentication is disabled.

Recommendations Update to version 1.11.2.