baresip vulnerabilities

Products

• re 1

Latest baresip CVEs

Newest publication first

1. CVE-2026-50161 libre: Integer overflow in websock_decode() masked frame length check leads to heap buffer overflow

   Published 2026-08-18

   Critical·CVSS 9.3 EPSS 0.72%

   libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length en...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.