CVE-2026-57191

{
  "etk_id": "ETK-2026-2801",
  "cve_id": "CVE-2026-57191",
  "display_id": "CVE-2026-57191",
  "ghsa_id": "GHSA-589g-qgf8-m6mx",
  "euvd_id": "EUVD-2026-111397",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Stack buffer overflow in Asterisk PJSIP MWI notification handling",
  "summary": "Asterisk and Certified Asterisk releases before the listed fixed builds are affected by a stack buffer overflow in PJSIP MWI notification processing. An unauthenticated attacker able to send an MWI NOTIFY message to the vulnerable service can corrupt its SIP transport and disable SIP functionality until Asterisk is restarted.",
  "mitigation": "Upgrade Asterisk to 20.20.1, 21.12.3, 22.10.1, or 23.4.1, or upgrade Certified Asterisk to 20.7-cert11 or 22.8-cert3. Until upgraded, restrict network access to SIP services to trusted peers.",
  "vendor": "asterisk",
  "product": "asterisk",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 20.20.0"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "20.20.1"
      ],
      "package_name": "asterisk",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 21.12.2"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "21.12.3"
      ],
      "package_name": "asterisk",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 22.10.0"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "22.10.1"
      ],
      "package_name": "asterisk",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 23.4.0"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "23.4.1"
      ],
      "package_name": "asterisk",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 20.7-cert10"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "20.7-cert11"
      ],
      "package_name": "certified-asterisk",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 22.8-cert2"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "22.8-cert3"
      ],
      "package_name": "certified-asterisk",
      "purl": null
    }
  ],
  "cwes": [
    120
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 91.69646261666666,
  "t0_at": "2026-10-27T21:32:23.714000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-27T21:32:23.714000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-27T21:32:23.714000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-57191"
    }
  }
}