Live › vulnerability › CVE-2026-57194
Go to dashboardAsterisk's chan_unistim module has an out-of-bounds write in DIALPAGE digit handling that overflows the phone_number field. A crafted incoming packet can crash Asterisk, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Deployments that load chan_unistim and expose its UNISTIM UDP port to a network the attacker can reach, such as Unistim phone systems. The attacker must register as a configured phone MAC, or the deployment must have an autoprovisioning path that lets the client reach the main page. Systems that do not load chan_unistim are not affected.
No product ranges from the sources yet.
chan_unistim module is loaded in Asterisk (for example with asterisk -rx "module show like unistim").asterisk -V and compare it to the fixed releases.unistim.conf defines a UNISTIM UDP port reachable from untrusted networks.20.20.1, 21.12.3, 22.10.1 or 23.4.1.20.7-cert11 or 22.8-cert3.chan_unistim.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an out-of-bounds write in chan_unistim DIALPAGE digit handling can overflow the phone_number field and crash Asterisk when an attacker sends a carefully crafted incoming request packet. The chan_unistim module must be loaded and configured with a valid UNISTIM UDP port that the attacker can reach. The attacker must register as a configured phone MAC, or the deployment must have an equivalent production/autoprovisioning path that allows the client to reach the main page. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
This page as .md · .json · in your agent: get_signal("CVE-2026-57194")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.