CVE-2026-116781 | SignalWire FreeSWITCH up to 1.11.1 WebSocket ws_read_frame datalen out-of-bounds write

November 5, 2026 Yanac

A vulnerability was found in SignalWire FreeSWITCH up to 1.11.1. It has been rated as problematic. Affected by this issue is the function ws_read_frame of the component WebSocket. This manipulation of the argument datalen causes out-of-bounds write.

This vulnerability is handled as CVE-2026-116781. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More