CVE-2026-116783

{
  "etk_id": "ETK-2026-3665",
  "cve_id": "CVE-2026-116783",
  "display_id": "CVE-2026-116783",
  "ghsa_id": "GHSA-mjp3-3cq2-hxj4",
  "euvd_id": "EUVD-2026-117759",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Out-of-bounds write in FreeSWITCH T.38 processing",
  "summary": "FreeSWITCH versions before 1.11.2 contain an out-of-bounds write in mod_spandsp processing of T.38 UDPTL recovery data. A peer that can provide UDPTL traffic during an established T.38 fax session can cause memory corruption and terminate the FreeSWITCH service, interrupting active calls. Exposure applies where T.38 fax services or gateways accept such traffic.",
  "mitigation": "Upgrade FreeSWITCH to >= 1.11.2 or later.",
  "vendor": "signalwire",
  "product": "freeswitch",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.11.1"
      ],
      "ecosystem": "c",
      "fixed_versions": [
        ">= 1.11.2"
      ],
      "package_name": "FreeSWITCH",
      "purl": null
    }
  ],
  "cwes": [
    129
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 13.813479033333333,
  "t0_at": "2026-11-05T19:41:44.761000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-05T19:41:44.761000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T19:41:44.761000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116783"
    }
  }
}