Buffer Overflow Affecting FreeSWITCH Telecommunications Platform

CVE-2026-116573

What is CVE-2026-116573?

FreeSWITCH, an open-source telecommunications platform, is susceptible to a stack-based buffer overflow in the mod_sofia module, occurring during the generation of dialog-event notifications. This vulnerability allows a malicious peer to craft an excessively long SIP To-header user part, triggering a buffer overflow when subscribing to dialog events. Exploiting this issue requires enabling presence or shared appearance management, and may involve having valid profile credentials, unless subscription authentication is disabled. The potential consequence of exploitation includes termination of the FreeSWITCH process and disruption of all active calls. The issue has been addressed in version 1.11.2.

References