CVE-2026-57194 Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-57194?
CVE-2026-57194 is a medium-severity vulnerability in asterisk, published on 27 Oct 2026.
Official description
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an out-of-bounds write in `chan_unistim` `DIALPAGE` digit handling can overflow the `phone_number` field and crash Asterisk when an attacker sends a carefully crafted incoming request packet. The `chan_unistim` module must be loaded and configured with a valid `UNISTIM UDP port` that the attacker can reach. The attacker must register as a configured `phone MAC`, or the deployment must have an equivalent `production/autoprovisioning` path that allows the client to reach the main page. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
Weakness: CWE-787
Which versions are affected by CVE-2026-57194?
How do I fix CVE-2026-57194?
Upgrade to a fixed version.
Is CVE-2026-57194 being exploited?
There is no known exploitation of CVE-2026-57194 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-57194, GHSA-3g56-cgrh-95p5, UBUNTU-CVE-2026-57194.