Login Request a demo
Medium severity · published Oct 27, 2026
CVE-2026-57185
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
New
6.5
CVSS
–
EPSS
No
On KEV
Description
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer over-read in the `PJSIP MWI body parser` by sending a carefully crafted `SIP NOTIFY` request. The attacker must pass SIP authentication using either a username/password or `source IP address matching`. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
asterisk · asterisk
< 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1 · source: vendor
CE
certified-asterisk · asterisk
< 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 · source: vendor
Affected product
AS
asterisk
asterisk
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-57185
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-57185
github.com
https://github.com/asterisk/asterisk/commit/07aec894a1fdfa7fa989d3ab40fdf0dcda8005bb
github.com
https://github.com/asterisk/asterisk/commit/1039bed76fa3248f58b6880e4b3f1421ef98b01f
github.com
https://github.com/asterisk/asterisk/commit/1b2d99d8eb9206d37fd47115996f67fd28bd056f
github.com
https://github.com/asterisk/asterisk/commit/3100a0d331affbf0995b8c57aaddb31cf3971f6e
github.com
https://github.com/asterisk/asterisk/commit/57ce484a45b098de417f19265c95c64497782e36
github.com
https://github.com/asterisk/asterisk/commit/919f2ffda03329c9014bedcb3c7789d38660c9ed
More from asterisk
8.8
CVE-2024-42365
Asterisk is an open source private branch exchange (PBX) and telephony toolkit
8.2
CVE-2026-57191
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
8.1
CVE-2026-57202
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
7.7
CVE-2026-57197
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
7.5
CVE-2026-57186
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser