PT-2026-44990 · Signalwire · Freeswitch

Published 2026-05-29 · Updated 2026-06-09 · CVE-2026-45771

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.0

Description The bundled XML parser in FreeSWITCH expands nested <!ENTITY> declarations without a depth or count bound. This allows a small Document Type Definition (DTD) to describe a body that expands exponentially, a technique known as a billion laughs attack. An unauthenticated network attacker can exploit this by sending a SIP PUBLISH request with a malicious PIDF body, which is processed by the parser before any digest check, leading to unbounded CPU and memory consumption.

Recommendations Update to version 1.11.0.

Fix

DoS

XML Entity Expansion

Weakness Enumeration

CWE-776

Related Identifiers

CVE-2026-45771

Affected Products

Freeswitch

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-45771 · Security Note
• https://github.com/signalwire/freeswitch/releases/tag/v1.11.0 · Note
• https://github.com/signalwire/freeswitch/security/advisories/GHSA-5vjg-pv56-vg4c · Note
• https://twitter.com/enablesecurity/status/2060385602445492408 · Twitter Post