CVE-2026-57198Published
Asterisk: Possible RED T.140 Heap Buffer Overflow
Exact source revision recorded 27 Oct 2026 17:43:43 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-57198 · Microsoft / collected KEV context
cve-program · CVE-2026-57198
- https://github.com/asterisk/asterisk/security/advisories/GHSA-vfhr-r9x9-c687
- https://github.com/asterisk/asterisk/commit/0601c33d4edf8c8f221de91cead59460fb1e7180
- https://github.com/asterisk/asterisk/commit/111487298a954a029daae941eac423f0609b1261
- https://github.com/asterisk/asterisk/commit/536218a86b797996e8e8844deacc8207de373701
- https://github.com/asterisk/asterisk/commit/a89b61d7c756f816c7fa5327ead9e889f1531202
- https://github.com/asterisk/asterisk/commit/eaa108c68a32c080d7a168ef1d8bf784d5d830f4
- https://github.com/asterisk/asterisk/commit/eef894282be203cb9e6d8e9692e9c360a0b569b4
- https://github.com/asterisk/asterisk/commit/fde69a1f3ff17f507a1578ae27b528f43ceb5efd
- https://github.com/asterisk/asterisk/releases/tag/20.20.1
- https://github.com/asterisk/asterisk/releases/tag/21.12.3
- https://github.com/asterisk/asterisk/releases/tag/22.10.1
- https://github.com/asterisk/asterisk/releases/tag/23.4.1
- https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11
- https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3
- https://github.com/asterisk/asterisk/tree/24.0.0-pre1
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.