CVE-2026-57201Published
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-57201 · Microsoft / collected KEV context
cve-program · CVE-2026-57201
- https://github.com/asterisk/asterisk/security/advisories/GHSA-x348-j6c9-77f3
- https://github.com/asterisk/asterisk/commit/2d7b8c8dc13d9ead8b6f36cc38b6dd91cd4abd3a
- https://github.com/asterisk/asterisk/commit/33f62e351642edd9c58ef97b0002132722546af9
- https://github.com/asterisk/asterisk/commit/875ac7413de0b7068cd12d0da2f140cd06ba9357
- https://github.com/asterisk/asterisk/commit/ac0a64dec6d4231bf005a68da6af3e02bb311634
- https://github.com/asterisk/asterisk/commit/bf0c9a906892bc0f91fa753476e326919e4e30e5
- https://github.com/asterisk/asterisk/commit/c4d9b4defe83f74523880fd630c02c49683786a3
- https://github.com/asterisk/asterisk/commit/fff256d0539e96f70ac315844d72e9d540f03a4c
- https://github.com/asterisk/asterisk/releases/tag/20.20.1
- https://github.com/asterisk/asterisk/releases/tag/21.12.3
- https://github.com/asterisk/asterisk/releases/tag/22.10.1
- https://github.com/asterisk/asterisk/releases/tag/23.4.1
- https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11
- https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3
- https://github.com/asterisk/asterisk/tree/24.0.0-pre1
Related operational evidence
Explicit CVE identifiers- Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer · Newly collected advisory · 27 Oct 2026