Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

freeswitch Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-49848`FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityMedium
`CVE-2026-49847`FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityHigh
`CVE-2026-49843`FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityMedium
`CVE-2026-49842`FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityHigh
`CVE-2026-49841`FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityCritical
`CVE-2026-49840`FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityCritical
`CVE-2026-49475`FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityHigh
`CVE-2026-49472`FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityMedium
`CVE-2026-45771`Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion	Exploitation statusNot known exploited	FixYes	Affected productfreeswitch	Published06/09/2026	SeverityHigh
`CVE-2023-51443`FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation	Exploitation statusPublic exploit	FixNot confirmed	Affected productfreeswitch	Published12/27/2023	SeverityHigh
`CVE-2023-40019`FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names	Exploitation statusPublic exploit	FixNot confirmed	Affected productfreeswitch	Published09/15/2023	SeverityHigh
`CVE-2023-40018`FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID	Exploitation statusPublic exploit	FixNot confirmed	Affected productfreeswitch	Published09/15/2023	SeverityHigh
`CVE-2023-32307`heap-over-flow and integer-overflow in sofia-sip	Exploitation statusPublic exploit	FixNot confirmed	Affected productsofia-sip	Published05/26/2023	SeverityHigh
`CVE-2023-22741`heap-over-flow in stun_parse_attribute in sofia-sip	Exploitation statusPublic exploit	FixNot confirmed	Affected productsofia-sip	Published01/19/2023	SeverityCritical
`CVE-2022-31002`Out-of-bounds Read in Sofia-SIP	Exploitation statusPublic exploit	FixNot confirmed	Affected productsofia-sip	Published05/31/2022	SeverityHigh
`CVE-2022-31003`Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP	Exploitation statusPublic exploit	FixNot confirmed	Affected productsofia-sip	Published05/31/2022	SeverityCritical
`CVE-2022-31001`Out-of-bounds Read in Sofia-SIP	Exploitation statusNot confirmed	FixNot confirmed	Affected productsofia-sip	Published05/31/2022	SeverityHigh
`CVE-2021-41158`FreeSWITCH vulnerable to SIP digest leak for configured gateways	Exploitation statusNot confirmed	FixYes	Affected productfreeswitch	Published10/26/2021	SeverityMedium
`CVE-2021-41157`FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default	Exploitation statusNot confirmed	FixYes	Affected productfreeswitch	Published10/26/2021	SeverityMedium
`CVE-2021-41105`FreeSWITCH susceptible to Denial of Service via invalid SRTP packets	Exploitation statusNot confirmed	FixYes	Affected productfreeswitch	Published10/25/2021	SeverityHigh
`CVE-2021-41145`FreeSWITCH susceptible to Denial of Service via SIP flooding	Exploitation statusNot confirmed	FixYes	Affected productfreeswitch	Published10/25/2021	SeverityHigh
`CVE-2021-37624`FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing	Exploitation statusNot confirmed	FixYes	Affected productfreeswitch	Published10/25/2021	SeverityHigh
`CVE-2019-19492`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/02/2019	SeverityUnknown
`CVE-2018-19911`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/06/2018	SeverityUnknown
`CVE-2015-7392`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/05/2015	SeverityUnknown
`CVE-2013-2238`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/30/2013	SeverityUnknown

26 / 26 Results

All vulnerabilities loaded

Security vulnerabilities from freeswitch

freeswitch

Filters

Run an in-depth assessment with complete web risk management

Popular freeswitch products

sofia-sip