Asterisk certified-asterisk

• CVE-2026-57199 Low 2.3 Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers 0.5%
• CVE-2026-57203 Medium 6.9 Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location 0.1%
• CVE-2026-57190 High 7.0 Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field 0.7%
• CVE-2026-57191 High 8.2 Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing 0.6%
• CVE-2026-57192 Medium 6.0 Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch 0.7%
• CVE-2026-57186 High 7.5 Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser 0.6%
• CVE-2026-57195 High 7.5 Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication 0.6%
• CVE-2026-57202 High 8.1 Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes 0.4%
• CVE-2026-57188 High 7.1 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling 0.5%
• CVE-2026-57189 Low 2.3 Asterisk: Possible RED T.140 Generation Accumulation OOB Write 0.7%
• CVE-2026-57201 High 7.5 Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer 0.7%
• CVE-2026-57194 Medium 5.9 Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk 0.4%
• CVE-2026-57198 Low 2.3 Asterisk: Possible RED T.140 Heap Buffer Overflow 0.8%
• CVE-2026-57185 Medium 6.5 Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 0.5%
• CVE-2026-57197 High 7.7 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) 0.5%
• CVE-2026-57184 Medium 6.3 Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) 0.6%
• CVE-2026-57193 Medium 6.9 Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) 2.0%
• CVE-2026-57187 High 7.1 Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing 0.5%
• CVE-2026-57196 Low 2.3 Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages 0.8%