CVE-2026-116788

HIGH 8.2

FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding

CVSS Score

8.2

EPSS Score

0.0%

EPSS Percentile

0th

FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switch_xml_decode() can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An unauthenticated attacker who can reach a SIP profile with presence management enabled and DTD processing permitted can trigger the vulnerability through a crafted SIP PUBLISH request. Exploitation can corrupt heap memory and terminate the FreeSWITCH process, interrupting all active calls. This vulnerability is fixed in version 1.11.2.

CWE	CWE-122 CWE-131 CWE-191
Vendor	signalwire
Product	freeswitch
Published	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for signalwire freeswitch

Be the first to know when new high vulnerabilities affecting signalwire freeswitch are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Affected Versions

signalwire / freeswitch

< 1.11.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/signalwire/freeswitch/security/advisories/GHSA-f73w-xph4-pjp3 github.com: https://github.com/signalwire/freeswitch/commit/587474a1584488f0c04201e6e61efe76aa5bda01 github.com: https://github.com/signalwire/freeswitch/releases/tag/v1.11.2