freeswitch CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM freeswitch CVE published 2026-10-14

CVE-2026-110658

A heap out-of-bounds read vulnerability exists in Sofia-SIP through version 1.13.18 in the msg_multipart_parse() function. This allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries in an INVITE request with a multipart Content-Type. The vulnerability can cause a denial of service, and defenders of FreeSWITCH Sofia-SIP deployments should assess exposure and veri [truncated]