Skip to content
Threat Feed
Subscribe

Tag

Telephony

2 briefs RSS
low advisory

Asterisk: H.323 channel driver stack buffer overflow (CVE-2026-57201)

A stack buffer overflow in the Asterisk chan_ooh323 module allows a remote attacker to crash the telephony process via a crafted H.323 packet.

Asterisk +1 denial-of-service buffer-overflow telephony
1t 1c
medium advisory

Pipecat Telephony Runner Unauthenticated Call-Control Abuse

An unauthenticated remote attacker can leverage a missing authorization vulnerability (CWE-862) in the Pipecat development runner's `/ws` WebSocket endpoint to supply a crafted `callSid` in a handshake message, compelling the server to use its configured Twilio, Telnyx, or Plivo credentials to issue authenticated API requests that terminate active calls, resulting in denial of service and credential abuse.

pipecat development runner api-security websocket telephony cwe-862 python
1r 3t 3i