What’s Vulnerable › Products

asterisk vulnerabilities

48 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Check whether your asterisk version is affected

Latest asterisk vulnerabilities

• CVE-2026-57199 — Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers (CVSS 2.3)
• CVE-2026-57203 — Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location (CVSS 6.9)
• CVE-2026-57190 — Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field (CVSS 7.0)
• CVE-2026-57191 — Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing (CVSS 8.2)
• CVE-2026-57192 — Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch (CVSS 6.0)
• CVE-2026-57186 — Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser (CVSS 7.5)
• CVE-2026-57200 — Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE (CVSS 7.5)
• CVE-2026-57195 — Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication (CVSS 7.5)
• CVE-2026-57202 — Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes (CVSS 8.1)
• CVE-2026-57188 — Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling (CVSS 7.1)
• CVE-2026-57189 — Asterisk: Possible RED T.140 Generation Accumulation OOB Write (CVSS 2.3)
• CVE-2026-57201 — Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer (CVSS 7.5)
• CVE-2026-57194 — Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk (CVSS 5.9)
• CVE-2026-57198 — Asterisk: Possible RED T.140 Heap Buffer Overflow (CVSS 2.3)
• CVE-2026-57185 — Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser (CVSS 6.5)
• CVE-2026-57197 — Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) (CVSS 7.7)
• CVE-2026-57184 — Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) (CVSS 6.3)
• CVE-2026-57193 — Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) (CVSS 6.9)
• CVE-2026-57187 — Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing (CVSS 7.1)
• CVE-2026-57196 — Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages (CVSS 2.3)
• CVE-2026-23741 — ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation (CVSS 8.8)
• CVE-2026-23740 — Asterisk vulnerable to potential privilege escalation (CVSS 7.8)
• CVE-2026-23739 — Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection (CVSS 6.5)
• CVE-2026-23738 — The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization (CVSS 6.1)
• CVE-2025-1131 — Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation (CVSS 7.8)