CVE-2026-57201 — Asterisk H.323 ooTrace() stack buffer overflow via unbounded vsprintf

Before the fixed versions, Asterisk’s H.323 ooTrace() trace-logging function can suffer a stack buffer overflow when unbounded vsprintf writes into a fixed 2048-byte buffer. A remote attacker may send a carefully crafted packet that causes the Asterisk process to crash.