CVE-2026-49841

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.1

Description The mod verto HTTP request handler allocates a fixed 2 MiB buffer for a POST application/x-www-form-urlencoded body but accepts a Content-Length of up to nearly 10 MiB. Because the body-read loop is bounded by the Content-Length instead of the buffer size, an attacker can trigger a heap overflow of approximately 8 MiB. This occurs before the HTTP basic-auth check is executed.

Recommendations Update to version 1.11.1.