# cve.now: Asterisk

The newest entries naming Asterisk as an affected vendor (up to 200), of 37 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-57199](https://cve.now/CVE-2026-57199.md): Asterisk: Asterisk app\_sms.c copies externally controlled SMS lengths into fixed in-struct buffers (CVSS 2.3)
- [CVE-2026-57203](https://cve.now/CVE-2026-57203.md): Asterisk: Local privilege escalation through ast\_loggrabber's world-writable helper location (CVSS 6.9)
- [CVE-2026-57190](https://cve.now/CVE-2026-57190.md): Asterisk: SQL Injection in cel\_pgsql and cel\_tds via CELGenUserEvent eventtype Field (CVSS 7.0)
- [CVE-2026-57191](https://cve.now/CVE-2026-57191.md): Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing (CVSS 8.2)
- [CVE-2026-57192](https://cve.now/CVE-2026-57192.md): Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch (CVSS 6.0)
- [CVE-2026-57186](https://cve.now/CVE-2026-57186.md): Asterisk: CVE-2022-37325 fix is absent from current chan\_ooh323 Q.931 party-number parser (CVSS 7.5)
- [CVE-2026-57200](https://cve.now/CVE-2026-57200.md): Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE (CVSS 7.5)
- [CVE-2026-57195](https://cve.now/CVE-2026-57195.md): Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication (CVSS 7.5)
- [CVE-2026-57202](https://cve.now/CVE-2026-57202.md): Asterisk: ARI setChannelVar bypasses live\_dangerously and permits FILE() writes (CVSS 8.1)
- [CVE-2026-57188](https://cve.now/CVE-2026-57188.md): Asterisk: Stack buffer overflow in res\_xmpp XMPP namespace prefix handling (CVSS 7.1)
- [CVE-2026-57189](https://cve.now/CVE-2026-57189.md): Asterisk: Possible RED T.140 Generation Accumulation OOB Write (CVSS 2.3)
- [CVE-2026-57201](https://cve.now/CVE-2026-57201.md): Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer (CVSS 7.5)
- [CVE-2026-57194](https://cve.now/CVE-2026-57194.md): Asterisk: chan\_unistim DIALPAGE digit handling can overflow phone\_number and crash Asterisk (CVSS 5.9)
- [CVE-2026-57198](https://cve.now/CVE-2026-57198.md): Asterisk: Possible RED T.140 Heap Buffer Overflow (CVSS 2.3)
- [CVE-2026-57185](https://cve.now/CVE-2026-57185.md): Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser (CVSS 6.5)
- [CVE-2026-57197](https://cve.now/CVE-2026-57197.md): Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format\_ogg\_speex) (CVSS 7.7)
- [CVE-2026-57184](https://cve.now/CVE-2026-57184.md): Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) (CVSS 6.3)
- [CVE-2026-57193](https://cve.now/CVE-2026-57193.md): Asterisk: LDAP Filter Injection in res\_config\_ldap via SIP Username (Unauthenticated Information Disclosure) (CVSS 6.9)
- [CVE-2026-57187](https://cve.now/CVE-2026-57187.md): Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing (CVSS 7.1)
- [CVE-2026-57196](https://cve.now/CVE-2026-57196.md): Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages (CVSS 2.3)
- [CVE-2026-23741](https://cve.now/CVE-2026-23741.md): ast\_coredumper running as root sources ast\_debug\_tools.conf from /etc/asterisk; potentially leading to privilege escalation (CVSS 0.0)
- [CVE-2026-23740](https://cve.now/CVE-2026-23740.md): Asterisk vulnerable to potential privilege escalation (CVSS 0.0)
- [CVE-2026-23739](https://cve.now/CVE-2026-23739.md): Asterisk xml.c uses unsafe XML\_PARSE\_NOENT leading to potential XXE Injection (CVSS 2.0)
- [CVE-2026-23738](https://cve.now/CVE-2026-23738.md): The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization (CVSS 3.5)
- [CVE-2025-1131](https://cve.now/CVE-2025-1131.md): Asterisk Unsafe Shell Sourcing in safe\_asterisk Leads to Local Privilege Escalation (CVSS 7.0)
- [CVE-2025-57767](https://cve.now/CVE-2025-57767.md): Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request (CVSS 7.5)
- [CVE-2025-54995](https://cve.now/CVE-2025-54995.md): Asterisk remotely exploitable leak of RTP UDP ports and internal resources (CVSS 6.5)
- [CVE-2025-49832](https://cve.now/CVE-2025-49832.md): Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation (CVSS 6.5)
- [CVE-2025-47780](https://cve.now/CVE-2025-47780.md): cli\_permissions.conf: deny option does not work for disallowing shell commands (CVSS 4.8)
- [CVE-2025-47779](https://cve.now/CVE-2025-47779.md): Using malformed From header can forge identity with ";" or NULL in name portion (CVSS 7.7)
- [CVE-2024-42491](https://cve.now/CVE-2024-42491.md): A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res\_resolver\_unbound is used (CVSS 5.7)
- [CVE-2024-42365](https://cve.now/CVE-2024-42365.md): Asterisk allows \`Write=originate\` as sufficient permissions for code execution / \`System()\` dialplan (CVSS 7.4)
- [CVE-2024-35190](https://cve.now/CVE-2024-35190.md): Asterisk' res\_pjsip\_endpoint\_identifier\_ip: wrongly matches ALL unauthorized SIP requests (CVSS 5.8)
- [CVE-2023-49786](https://cve.now/CVE-2023-49786.md): Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation (CVSS 7.5)
- [CVE-2023-37457](https://cve.now/CVE-2023-37457.md): Asterisk's PJSIP\_HEADER dialplan function can overwrite memory/cause crash when using 'update' (CVSS 7.5)
- [CVE-2023-49294](https://cve.now/CVE-2023-49294.md): Asterisk Path Traversal vulnerability (CVSS 4.9)
- [CVE-2009-3723](https://cve.now/CVE-2009-3723.md): asterisk allows calls on prohibited networks (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/asterisk
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.