CVE-2026-115928

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, switch_core_media_add_crypto() passed the encoded key and salt length from an inbound SDP a=crypto attribute to switch_b64_decode() as the destination capacity. A zero-length key and salt made that capacity underflow, allowing the decoded attribute to overflow a fixed stack buffer with sender-chosen bytes before the call was answered. On the shipped external profile, an unauthenticated caller can reach the SDES-SRTP parser, while profiles that challenge inbound calls remain affected for senders who can authenticate; setting rtp_secure_media_inbound to false removes the path, and WebRTC DTLS-SRTP legs are unaffected. The overflow corrupts memory and can crash the FreeSWITCH process, dropping every active call, although remote code execution has not been demonstrated. This issue is fixed in version 1.11.2.

• CWE-121
• CWE-191

• https://github.com/signalwire/freeswitch/commit/86b10358e2a191e2daff33d97c32757d43c8f92f
• https://github.com/signalwire/freeswitch/releases/tag/v1.11.2
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-fvjx-g9x8-3xqh

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115920Open Neural Network Exchange (ONNX) is an open standard for …6.2
• CVE-2026-115921Open Neural Network Exchange (ONNX) is an open standard for …6.2
• CVE-2026-115922Open Neural Network Exchange (ONNX) is an open standard for …6.2
• CVE-2026-115923Backstage is an open framework for building developer portal…6.5
• CVE-2026-115924Rembg is a tool to remove images background. Prior to 2.0.82…8.6
• CVE-2026-115927Tornado is a Python web framework and asynchronous networkin…5.3
• CVE-2026-115929MongoDB Compass relies on Electron, a third-party runtime th…6.8
• CVE-2026-115930The MongoDB Shell (mongosh) relies on Node.js as a third-par…6.8
• CVE-2026-115931Postiz lets a signed-in user ask the backend to run a functi…9.9
• CVE-2026-115932When a post is published, Postiz treats a media path that is…9.6
• CVE-2026-115933Postiz signs its session, invitation and password reset toke…9.9
• CVE-2026-115935The app/process-api-response-headers action accepts fake Cra…8.8