Live › vulnerability › CVE-2026-57192
Go to dashboardAsterisk's Codec2 audio decoder writes past a heap buffer when a call sends crafted Codec2 packets, because the floor and ceil sample counts do not match. An authenticated SIP caller can use this to corrupt memory in the PBX process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 22:29 UTC. All times on this page are UTC.
Systems running Asterisk that load the codec_codec2 module and offer Codec2 to SIP endpoints. Attackers must first pass SIP authentication, by username and password or by a matching source IP address, so exposure depends on who can register or call in. Deployments that do not load codec_codec2 or do not enable Codec2 can skip it.
No product ranges from the sources yet.
asterisk -rx "core show version" and compare against the fixed releases.codec_codec2 module is loaded with asterisk -rx "module show like codec2".grep -i codec2 /etc/asterisk/*.conf.20.20.1, 21.12.3, 22.10.1 or 23.4.1, or Certified Asterisk to 20.7-cert11 or 22.8-cert3.codec_codec2 or remove Codec2 from endpoint codec lists.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap buffer overflow through an out-of-bounds write in the Codec2 decoder caused by a floor/ceil sample-count mismatch. The codec_codec2 module must be loaded and Codec2 must be configured on the attacked endpoint. The attacker must pass SIP authentication by username/password or source IP address matching, establish a call using Codec2, and send carefully crafted Codec2 audio packets. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
This page as .md · .json · in your agent: get_signal("CVE-2026-57192")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.