AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-26713

MEDIUM · CVSS 6.5 EPSS 1.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-02-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-26713
Severity
MEDIUM
CVSS
6.5
EPSS
1.85%

Original NVD Description

A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause an Asterisk crash by sending multiple hold/unhold requests in quick succession. This is caused by a signedness comparison mismatch.