Drachtio

Drachtio is a narrowly scoped open-source SIP server and telephony framework, with its vulnerability profile concentrating in the core drachtio-server product. Its disclosed vulnerabilities skew strongly toward critical-severity outcomes and recur through memory-safety and boundary-handling weakness classes, including improper null termination, off-by-one errors, out-of-bounds reads, and reachable assertions, reflecting the low-level C/C++ implementation typical of real-time communications infrastructure. Defenders deploying this server should prioritize patching and monitor updates closely; live severity, exploitation, and exposure counts are shown alongside this summary.