CVE-2026-116568

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmp_rtmp2rtpH264() trusted the length prefix of each inbound H.264 NAL unit without checking it against the bytes remaining in the RTMP message. An oversized declared unit underflowed the unsigned remaining-byte counter and advanced the parser beyond its receive buffer, where the next length-prefix read could crash the process. The flaw affects deployments that build and load mod_rtmp and accept video call sessions, commonly on TCP port 1935; placing the call requires a directory login where auth-calls is true, while no credentials are required where auth-calls is absent or false. A remote client can terminate FreeSWITCH and every active call, but the defect supplies no write primitive and memory disclosure has not been demonstrated. This issue is fixed in version 1.11.2.

• CWE-125
• CWE-191

• https://github.com/signalwire/freeswitch/commit/72cda5bfad67d14d8dbe76b8f8bdd38c4fa5c932
• https://github.com/signalwire/freeswitch/releases/tag/v1.11.2
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-2gp7-f34j-j4xw

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116556A vulnerability was found in Argilla up to 2.8.0. This affec…2.4
• CVE-2026-116557The WP Booking System - Booking Calendar plugin for WordPres…9.1
• CVE-2026-11656Use after free in ServiceWorker in Google Chrome prior to 14…8.3
• CVE-2026-116563The Photo Gallery, Sliders, Proofing and Themes – NextGEN Ga…5.4
• CVE-2026-116566socket.getaddrinfo() previously accepted null bytes within *…5.3
• CVE-2026-116567FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-116569FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-11657Use after free in Payments in Google Chrome on Mac prior to …8.8
• CVE-2026-116570FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-116571FreeSWITCH is a Software Defined Telecom Stack enabling the …5.9
• CVE-2026-116572FreeSWITCH is an open-source software telecommunications pla…6.5
• CVE-2026-116573FreeSWITCH is an open-source software telecommunications pla…6.5