CVE-2026-116573

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions 1.10.0 through 1.11.1

Description A stack-based buffer overflow exists in mod sofia during the generation of dialog-event notifications. A remote peer can trigger this by establishing a dialog using an excessively long SIP To-header user part and subscribing to the dialog events of that entity, which causes the stored value to overflow a fixed-size stack buffer. This issue can lead to the termination of the FreeSWITCH process and all active calls. Successful exploitation requires presence or shared-appearance management to be enabled and typically requires valid profile credentials, unless subscription authentication is disabled.

Recommendations Update FreeSWITCH to version 1.11.2.