Buffer Over-read Vulnerability in Asterisk Telephony Toolkit
CVE-2026-57185
6.5MEDIUM
What is CVE-2026-57185?
An identified vulnerability in Asterisk's PJSIP MWI body parser allows authenticated attackers to exploit a buffer over-read condition. By sending a specially crafted SIP NOTIFY request, these attackers can cause the Asterisk server to crash. The exploit necessitates the attacker passing SIP authentication, either through valid username/password combinations or by IP address matching. This vulnerability has been addressed in various updated versions of Asterisk, ensuring the stability and security of users' telephony environments.
Affected Version(s)
asterisk < 20.20.1 < 20.20.1
asterisk >= 21.0.0-pre1, < 21.12.3 < 21.0.0-pre1, 21.12.3
asterisk >= 22.0.0-pre1, < 22.10.1 < 22.0.0-pre1, 22.10.1