CVE-2026-116785

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, ws_read_frame() decoded a WebSocket frame's 64-bit extended payload length with a 32-bit byte swap and narrowed the result into a signed length. A value whose surviving low word became negative bypassed the signed size check and was reinterpreted as an enormous unsigned count, causing client bytes to overwrite memory beyond the 64 KiB receive buffer. Any client completing a /socket WebSocket upgrade on an enabled mod_xml_rpc endpoint reached the parser before HTTP authentication; both the module and WebSocket endpoint are disabled by default. The heap overwrite can corrupt connection pointers and crash FreeSWITCH, ending every concurrent session, although remote code execution has not been demonstrated. This issue is fixed in version 1.11.2.

• CWE-122
• CWE-681
• CWE-787

• https://github.com/signalwire/freeswitch/commit/d557ca6d29e6da4f10824dc158100906a592b91a
• https://github.com/signalwire/freeswitch/releases/tag/v1.11.2
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-jj89-q47c-gh94

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11678Integer overflow in libyuv in Google Chrome prior to 149.0.7…5.3
• CVE-2026-116780FreeSWITCH is a Software Defined Telecom Stack enabling the …2.7
• CVE-2026-116781FreeSWITCH is a Software Defined Telecom Stack enabling the …5.3
• CVE-2026-116782FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-116783FreeSWITCH is a Software Defined Telecom Stack enabling the …8.2
• CVE-2026-116784FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-116786FreeSWITCH is a Software Defined Telecom Stack enabling the …8.8
• CVE-2026-116787FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2026-116788FreeSWITCH is an open-source software telecommunications pla…8.2
• CVE-2026-116789FreeSWITCH is a Software Defined Telecom Stack enabling the …7.4
• CVE-2026-11679Use after free in Codecs in Google Chrome on Windows prior t…8.3
• CVE-2026-116790FreeSWITCH is a Software Defined Telecom Stack enabling the …9.1