CVE-2026-115928 | SignalWire FreeSWITCH up to 1.11.1 SDES-SRTP parser switch_core_media_add_crypto stack-based overflow

November 5, 2026 Yanac

A vulnerability described as critical has been identified in SignalWire FreeSWITCH up to 1.11.1. This vulnerability affects the function switch_core_media_add_crypto of the component SDES-SRTP parser. Executing a manipulation can lead to stack-based buffer overflow.

This vulnerability is tracked as CVE-2026-115928. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More