signalwire

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

signalwire records in CISA KEV

No signalwire vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sofia-sip 5 records HIGH Freeswitch 1 record LOW

Records

45 records

TI-2023-08915 CVE-2023-22741

heap-over-flow in stun_parse_attribute in sofia-sip

HIGH 82

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02482 Published 2023-01-19 Fixed in 1.13.11 CWE-120

TI-2022-13049 CVE-2022-31003

Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP

HIGH 81

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04107 Published 2022-05-31 Fixed in 1.13.8 CWE-122

TI-2023-28097 CVE-2023-51443

FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation

HIGH 72

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01485 Published 2023-12-27 Fixed in 1.10.11 CWE-703

TI-2023-20909 CVE-2023-40019

Resource allocation without limits in signalwire freeswitch

HIGH 72

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00909 Published 2023-09-15 Fixed in 1.10.10 CWE-770

TI-2023-20908 CVE-2023-40018

FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID

HIGH 72

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00994 Published 2023-09-15 Fixed in 1.10.10 CWE-787

TI-2023-15601 CVE-2023-32307

heap-over-flow and integer-overflow in sofia-sip

HIGH 72

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01056 Published 2023-05-26 Fixed in 1.13.15 CWE-122

TI-2022-13048 CVE-2022-31002

Out-of-bounds Read in Sofia-SIP

HIGH 72

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01925 Published 2022-05-31 Fixed in 1.13.8 CWE-125

TI-2026-85617 CVE-2026-116779

Inbound SIP MESSAGE lets peers run FreeSWITCH API commands

MEDIUM 51

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2026-11-05 Fixed in 1.11.3 CWE-749

TI-2026-36745 CVE-2026-49841

FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read

MEDIUM 49

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2026-06-09 Fixed in 1.11.1 CWE-122

TI-2026-36744 CVE-2026-49840

FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing

MEDIUM 45

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0031 Published 2026-06-09 Fixed in 1.11.1 CWE-122

TI-2026-85621 CVE-2026-116785

Heap out-of-bounds write in FreeSWITCH mod_xml_rpc WebSocket handling

MEDIUM 41

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01031 Published 2026-11-05 Fixed in 1.11.2 CWE-122

TI-2021-17984 CVE-2021-41145

FreeSWITCH susceptible to Denial of Service via SIP flooding

MEDIUM 41

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01651 Published 2021-10-25 Fixed in 1.10.7 CWE-400

TI-2026-85628 CVE-2026-116782

Invalid pointer dereference in FreeSWITCH mod_rtmp connect handling

MEDIUM 40

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2026-11-05 Fixed in 1.11.2 CWE-125

TI-2026-85631 CVE-2026-116790

FreeSWITCH ICE checks lack STUN integrity validation, enabling media hijack

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00341 Published 2026-11-05 Fixed in 1.11.2 CWE-290

TI-2026-85623 CVE-2026-116787

Pre-authentication process termination in FreeSWITCH Event Socket

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2026-11-05 Fixed in 1.11.2 CWE-190

TI-2026-85612 CVE-2026-116568

Out-of-bounds read in FreeSWITCH mod_rtmp H.264 video parsing

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00527 Published 2026-11-05 Fixed in 1.11.2 CWE-125

TI-2026-36751 CVE-2026-49847

FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-06-09 Fixed in 1.11.1 CWE-674

TI-2026-36750 CVE-2026-49846

libks has path traversal in kws HTTP parser via URI segment overflow

LOW 39

libks provides foundational support for signalwire C products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-09-11 Fixed in 2.0.11 CWE-22

TI-2026-36746 CVE-2026-49842

FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00449 Published 2026-06-09 Fixed in 1.11.1 CWE-400

TI-2026-36629 CVE-2026-49475

FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00278 Published 2026-06-09 Fixed in 1.11.0 CWE-125

TI-2026-33508 CVE-2026-45771

Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00343 Published 2026-06-09 Fixed in 1.11.0 CWE-776

TI-2021-15499 CVE-2021-37624

FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03784 Published 2021-10-25 Fixed in 1.10.7 CWE-287

TI-2026-85622 CVE-2026-116786

Channel variable injection via SIP REFER in FreeSWITCH allows command execution

LOW 38

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00442 Published 2026-11-05 Fixed in 1.11.2 CWE-77

TI-2021-17946 CVE-2021-41105

FreeSWITCH susceptible to Denial of Service via invalid SRTP packets

LOW 38

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02521 Published 2021-10-25 Fixed in 1.10.7 CWE-20

TI-2026-85629 CVE-2026-116783

Out-of-bounds write in FreeSWITCH mod_spandsp UDPTL parsing

LOW 37

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00618 Published 2026-11-05 Fixed in 1.11.2 CWE-129

Open these records in search →

Critical	7
High	28
Medium	9
Low	1
No CVSS	0