CVE-2026-116783

{
  "etk_id": "ETK-2026-3665",
  "cve_id": "CVE-2026-116783",
  "display_id": "CVE-2026-116783",
  "ghsa_id": "GHSA-mjp3-3cq2-hxj4",
  "euvd_id": "EUVD-2026-117759",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Out-of-bounds write in FreeSWITCH mod_spandsp",
  "summary": "FreeSWITCH versions before 1.11.2 are affected by an out-of-bounds write in mod_spandsp T.38 UDPTL processing. A peer able to send UDPTL to an established T.38 fax session can cause memory corruption and crash FreeSWITCH, ending active calls. Deployments using T.38 fax applications or gateways are exposed when such a peer can reach the session.",
  "mitigation": "Upgrade FreeSWITCH to version 1.11.2 or later. Until upgraded, restrict untrusted peers from reaching established T.38 UDPTL sessions and disable or limit T.38 fax services where feasible.",
  "vendor": "signalwire",
  "product": "freeswitch",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.11.1"
      ],
      "ecosystem": "c",
      "fixed_versions": [
        ">= 1.11.2"
      ],
      "package_name": "FreeSWITCH",
      "purl": null
    }
  ],
  "cwes": [
    129
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 16.166834,
  "t0_at": "2026-11-05T19:41:44.761000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-05T19:41:44.761000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T19:41:44.761000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116783"
    }
  }
}