{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-116788", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-26T21:53:35.167Z", "datePublished": "2026-11-05T19:39:44.929Z", "dateUpdated": "2026-11-05T19:39:44.929Z"}, "containers": {"cna": {"title": "FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding", "problemTypes": [{"descriptions": [{"cweId": "CWE-122", "lang": "en", "description": "CWE-122: Heap-based Buffer Overflow", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-131", "lang": "en", "description": "CWE-131: Incorrect Calculation of Buffer Size", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-191", "lang": "en", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/signalwire/freeswitch/security/advisories/GHSA-f73w-xph4-pjp3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/signalwire/freeswitch/security/advisories/GHSA-f73w-xph4-pjp3"}, {"name": "https://github.com/signalwire/freeswitch/commit/587474a1584488f0c04201e6e61efe76aa5bda01", "tags": ["x_refsource_MISC"], "url": "https://github.com/signalwire/freeswitch/commit/587474a1584488f0c04201e6e61efe76aa5bda01"}, {"name": "https://github.com/signalwire/freeswitch/releases/tag/v1.11.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/signalwire/freeswitch/releases/tag/v1.11.2"}], "affected": [{"vendor": "signalwire", "product": "freeswitch", "versions": [{"version": "< 1.11.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T19:39:44.929Z"}, "descriptions": [{"lang": "en", "value": "FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in \u00a0switch_xml_decode()\u00a0 can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An unauthenticated attacker who can reach a SIP profile with presence management enabled and DTD processing permitted can trigger the vulnerability through a crafted SIP PUBLISH request. Exploitation can corrupt heap memory and terminate the FreeSWITCH process, interrupting all active calls. This vulnerability is fixed in version 1.11.2."}], "source": {"advisory": "GHSA-f73w-xph4-pjp3", "discovery": "UNKNOWN"}}}}

{}

{"affected": [{"affectedData": [{"product": "freeswitch", "vendor": "signalwire", "versions": [{"status": "affected", "version": "< 1.11.2"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in \u00a0switch_xml_decode()\u00a0 can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An unauthenticated attacker who can reach a SIP profile with presence management enabled and DTD processing permitted can trigger the vulnerability through a crafted SIP PUBLISH request. Exploitation can corrupt heap memory and terminate the FreeSWITCH process, interrupting all active calls. This vulnerability is fixed in version 1.11.2."}], "id": "CVE-2026-116788", "lastModified": "2026-11-05T22:38:13.080", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "[email protected]", "type": "Secondary"}]}, "published": "2026-11-05T20:17:46.240", "references": [{"source": "[email protected]", "url": "https://github.com/signalwire/freeswitch/commit/587474a1584488f0c04201e6e61efe76aa5bda01"}, {"source": "[email protected]", "url": "https://github.com/signalwire/freeswitch/releases/tag/v1.11.2"}, {"source": "[email protected]", "url": "https://github.com/signalwire/freeswitch/security/advisories/GHSA-f73w-xph4-pjp3"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}, {"lang": "en", "value": "CWE-131"}, {"lang": "en", "value": "CWE-191"}], "source": "[email protected]", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.11.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "freeswitch", "source": "cna", "vendor": "signalwire"}, "product": "freeswitch", "vendor": "signalwire"}], "created": "2026-11-05T20:45:07.069516+00:00", "updated": "2026-11-05T20:45:07.259741+00:00", "vendors": ["signalwire", "signalwire$PRODUCT$freeswitch"]}