Product by Open Source
Asterisk
10 known vulnerabilities in Asterisk (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-25994 | PJSIP has a heap buffer overflow in ICE with long username | 9.8 | |
| High | CVE-2026-57191 | Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing | — | |
| High | CVE-2026-57195 | Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication | 7.5 | |
| High | CVE-2026-57187 | Asterisk: Use After Free | — | |
| Medium | CVE-2026-57194 | Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk | 5.9 | |
| Low | CVE-2026-57198 | Asterisk: Possible RED T.140 Heap Buffer Overflow | — | |
| Medium | CVE-2026-57203 | Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location | — | |
| High | CVE-2026-28799 | PJSIP: Heap use-after-free in PJSIP presence subscription termination handler | 7.5 | |
| High | CVE-2026-32942 | PJSIP has ICE session use-after-free race conditions | 8.1 | |
| High | CVE-2026-33069 | PJSIP has an Out-of-bounds Read in SIP multipart parsing | 7.5 |