CVE-2026-116572 · Runtime
NO FIX YET · SEE WHAT TO DO
FreeSWITCH's mod_sofia module copies a SIP Contact display name into a fixed 512-byte stack buffer when sending dialog-event notifications, so an oversized name overflows it. A peer can crash the FreeSWITCH process and drop all active calls, and the overflow may allow more than a crash.
first public Oct 26, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Only FreeSWITCH deployments from 1.10.0 through 1.11.1 with presence management enabled, directly or through shared appearance, are exposed. Exposure is lower where valid profile credentials are required, which is the normal case unless subscription authentication is disabled. Systems on other versions, or without presence enabled, can skip it.
Not affected if auth-required, presence-disabled, version-outside-1.10.0-to-1.11.1
Who cares freeswitch, sip, telephony, voip
fs_cli -x "version" or check the installed FreeSWITCH version and see whether it is in the range 1.10.0 to 1.11.1.1.11.2 (fixed version stated in the description; the range is 1.10.0 to 1.11.1)FreeSWITCH is an open-source software telecommunications platform. From 1.10.0 to 1.11.1, there is a stack-based buffer overflow in mod_sofia when processing SIP Contact display names for dialog-event notifications. A peer can establish a dialog containing an excessively long display name and subsequently subscribe to that entity’s dialog events, causing the stored value to overflow a fixed 512-byte stack buffer. Exploitation requires presence management to be enabled, directly or through shared appearance, and normally requires valid profile credentials unless subscription authentication is disabled. The overflow can terminate the FreeSWITCH process and all active calls. This vulnerability is fixed in version 1.11.2.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.