CVE-2026-49847

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.1

Description An unauthenticated WebSocket frame containing a deeply nested JSON document can cause a stack overflow, crashing the process and terminating all active calls and sessions on the host. This occurs because recursion drives the worker thread's stack pointer into the stack guard page, triggering a SIGSEGV (a segmentation fault, which is a specific error caused by accessing memory that the CPU cannot physically address) from the kernel.

Recommendations Update to version 1.11.1.