Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2026-116785: FreeSWITCH may crash during WebSocket connection
CVE-2026-116785 · published today
Summary
The FreeSWITCH software (versions before 1.11.2) can mishandle certain WebSocket messages, causing it to write data past its memory buffer. This can corrupt internal data and make the system stop all active calls. Upgrade to version 1.11.2 or later, or disable the mod_xml_rpc WebSocket feature, to prevent the crash.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| signalwire | freeswitch | < 1.11.2 |
Original advisory text
FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, ws_read_frame() decoded a WebSocket frame's 64-bit extended payload length with a 32-bit byte swap and narrowed the result into a signed length. A value whose surviving low word became negative bypassed the signed size check and was reinterpreted as an enormous unsigned count, causing client bytes to overwrite memory beyond the 64 KiB receive buffer. Any client completing a /socket WebSocket upgrade on an enabled mod_xml_rpc endpoint reached the parser before HTTP authentication; both the module and WebSocket endpoint are disabled by default. The heap overwrite can corrupt connection pointers and crash FreeSWITCH, ending every concurrent session, although remote code execution has not been demonstrated. This issue is fixed in version 1.11.2.
References
- https://github.com/signalwire/freeswitch/security/advisories/GHSA-jj89-q47c-gh94 x_refsource_CONFIRM
- https://github.com/signalwire/freeswitch/commit/d557ca6d29e6da4f10824dc158100906... x_refsource_MISC
- https://github.com/signalwire/freeswitch/releases/tag/v1.11.2 x_refsource_MISC
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-122Heap-based Buffer Overflow
CWE-681Incorrect Conversion between Numeric Types
CWE-787Out-of-bounds Write
Timeline
Published5 Nov 2026
Updated5 Nov 2026
First seen5 Nov 2026
Track software like this
Free during beta