CVE-2026-57197

highpriority · track · 0DE

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 7.7 · high

Is it mine?

12 products

Check your exposure

Who says so?

1 sources

cert_bund

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded `memcpy` of `OGG/Speex` packet data in `format_ogg_speex` can cause a heap buffer overflow and crash Asterisk when reading a file containing corrupted Speex audio. The attacker must create the file and make it available to Asterisk either through sufficiently elevated privileges or by convincing an Asterisk administrator to make it available. Asterisk must also be configured to play that file. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

cvss

Technical severity, 0–10. One row per scoring source.

7.7

010

base score 0–10 · higher = more severe · hover a vector to decode

v4.07.7highCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · security-advisories@github.com

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-122USprimaryCWE-787USprimary

affected products (12)

Products and version ranges known to be affected.

Digium Certified Asterisk <20.7-cert11all versionscert_bundDE
Digium Certified Asterisk <22.8-cert3all versionscert_bundDE
Open Source Asterisk <20.20.1all versionscert_bundDE
Open Source Asterisk <21.12.3all versionscert_bundDE
Open Source Asterisk <22.10.1all versionscert_bundDE
Open Source Asterisk <23.4.1all versionscert_bundDE
Digium Certified Asterisk< 20.7-cert11cert_bundDE
Digium Certified Asterisk< 22.8-cert3cert_bundDE
Open Source Asterisk< 20.20.1cert_bundDE
Open Source Asterisk< 21.12.3cert_bundDE
Open Source Asterisk< 22.10.1cert_bundDE
Open Source Asterisk< 23.4.1cert_bundDE

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-2094Digium Certified Asterisk: Mehrere SchwachstellenDeutsch2026-06-25csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Digium Certified Asterisk und Asterisk ausnutzen, um Speicherfehler und Denial-of-Service-Zustände auszulösen, Informationen offenzulegen, Sitzungen zu übernehmen, Sicherheitsmechanismen und Berechtigungen zu umgehen, beliebige SQL- oder LDAP-Abfragen auszuführen sowie unter bestimmten Voraussetzungen beliebigen Programmcode auszuführen.

sources

Which sources assert this record, and when.

cert_bund NVD CVE.org MITRE

published 2026-10-27modified 2026-10-27

related (19,747)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-86950US	—OT critical	26.2% (98th)	KEV	2026-09-28
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1,…
CVE-2026-94127US	critical9.8OT critical	24.9% (98th)	KEV	2026-09-22
When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is o…
CVE-2026-85103US	—OT critical	4.29% (91st)	—	2026-09-09
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and…
CVE-2026-87491US	—OT critical	3.51% (89th)	KEV	2026-09-09
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security…
CVE-2026-85880US	high7.8OT critical	0.39% (33rd)	KEV	2026-09-08
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

+19742 more

references (15) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan