CVE-2026-116780 | SignalWire FreeSWITCH up to 1.11.1 Channel-Variable Expander switch_event_expand_headers_check variable:offset heap-based overflow

A vulnerability was found in SignalWire FreeSWITCH up to 1.11.1 and classified as very critical. This impacts the function switch_event_expand_headers_check of the component Channel-Variable Expander. Executing a manipulation of the argument variable:offset can lead to heap-based buffer overflow.

This vulnerability appears as CVE-2026-116780. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More