Asterisk vulnerabilities
37 CVEs and advisories name Asterisk as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-57199Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
- CVE-2026-57203Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
- CVE-2026-57190Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
- CVE-2026-57191Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
- CVE-2026-57192Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
- CVE-2026-57186Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
- CVE-2026-57200Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
- CVE-2026-57195Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
- CVE-2026-57202Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
- CVE-2026-57188Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
- CVE-2026-57189Asterisk: Possible RED T.140 Generation Accumulation OOB Write
- CVE-2026-57201Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
- CVE-2026-57194Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
- CVE-2026-57198Asterisk: Possible RED T.140 Heap Buffer Overflow
- CVE-2026-57185Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
- CVE-2026-57197Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
- CVE-2026-57184Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
- CVE-2026-57193Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
- CVE-2026-57187Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
- CVE-2026-57196Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
- CVE-2026-23741ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
- CVE-2026-23740Asterisk vulnerable to potential privilege escalation
- CVE-2026-23739Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
- CVE-2026-23738The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization
- CVE-2025-1131Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
- CVE-2025-57767Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
- CVE-2025-54995Asterisk remotely exploitable leak of RTP UDP ports and internal resources
- CVE-2025-49832Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
- CVE-2025-47780cli_permissions.conf: deny option does not work for disallowing shell commands
- CVE-2025-47779Using malformed From header can forge identity with ";" or NULL in name portion