CVE-2025-54995 – Asterisk Resource Exhaustion and Leak Vulnerability

CVE ID : CVE-2025-54995

Published : Aug. 28, 2025, 3:16 p.m. | 1 hour, 28 minutes ago

Description : Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4 and 18.9-cert17.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…