signalwire Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by signalwire
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON
CVE-2026-49847SignalwireFreeswitch7.5HIGHFreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames
CVE-2026-49842SignalwireFreeswitch7.5HIGHFreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read
CVE-2026-49841SignalwireFreeswitch9.8CRITICALFreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing
CVE-2026-49840SignalwireFreeswitch9.1CRITICALFreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing
CVE-2026-49475SignalwireFreeswitch7.5HIGHFreeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion
CVE-2026-45771SignalwireFreeswitch7.5HIGHFreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
CVE-2023-51443SignalwireFreeswitch7.5HIGHFreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID
CVE-2023-40018signalwirefreeswitch7.5HIGHFreeSWITCH susceptible to Denial of Service via invalid SRTP packets
CVE-2021-41105SignalwireFreeswitch7.5HIGHFreeSWITCH susceptible to Denial of Service via SIP flooding
CVE-2021-41145SignalwireFreeswitch8.6HIGHFreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing
CVE-2021-37624SignalwireFreeswitch👾🟡7.5HIGHInformation Disclosure Vulnerability in SignalWire FreeSWITCH Software
CVE-2021-36513SignalwireFreeswitch7.5HIGH