Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers

Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location

Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field

Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing

Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch

Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser

Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE

Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication

Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling

Asterisk: Possible RED T.140 Generation Accumulation OOB Write

Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer

Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk

Asterisk: Possible RED T.140 Heap Buffer Overflow

Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)

Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)

Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing

Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages

ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation

Asterisk vulnerable to potential privilege escalation

Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection

The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization

Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request

Asterisk remotely exploitable leak of RTP UDP ports and internal resources

Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation

cli_permissions.conf: deny option does not work for disallowing shell commands

Using malformed From header can forge identity with ";" or NULL in name portion