Vulnerabilities in asterisk
37 resultsCVE-2026-57197HIGHAsterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)EPSS 0.5%CVE-2025-49832MEDIUMAsterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory AllocationEPSS 0.5%CVE-2026-57188HIGHAsterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingEPSS 0.5%CVE-2025-54995MEDIUMAsterisk remotely exploitable leak of RTP UDP ports and internal resourcesEPSS 0.5%CVE-2026-57187HIGHAsterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processingEPSS 0.5%CVE-2026-57199LOWAsterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffersEPSS 0.5%CVE-2026-57185MEDIUMAsterisk: Buffer over-read in Asterisk PJSIP MWI body parserEPSS 0.5%CVE-2026-57194MEDIUMAsterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash AsteriskEPSS 0.4%CVE-2026-57202HIGHAsterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writesEPSS 0.4%CVE-2025-57767HIGHAsterisk can crash from a specifically malformed Authorization header in an incoming SIP requestEPSS 0.4%CVE-2025-47780MEDIUMcli_permissions.conf: deny option does not work for disallowing shell commandsEPSS 0.3%CVE-2025-1131HIGHAsterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege EscalationEPSS 0.2%CVE-2026-23739LOWAsterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE InjectionEPSS 0.2%CVE-2026-23741NONEast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalationEPSS 0.2%CVE-2026-23738LOWThe Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitizationEPSS 0.2%CVE-2026-57203MEDIUMAsterisk: Local privilege escalation through ast_loggrabber's world-writable helper locationEPSS 0.1%CVE-2026-23740NONEAsterisk vulnerable to potential privilege escalationEPSS 0.1%