Root on Your Conference Phone: HP Poly Flaw Turns VoIP Hardware Into an AI Deepfake Feed
A CVSS 9.2 stack overflow in HP Poly's ICE implementation hands attackers unauthenticated root — and a front-row seat to every executive call.
HP has patched a critical buffer overflow in several of its Poly IP conference phones. The bug, CVE-2026-0826, scores 9.2 on the CVSS scale and lets an unauthenticated attacker reach root on the device's operating system without touching a credential.
The vulnerable code lives in a helper function called ParseICECandidate inside the polyapp binary. When the Interactive Connectivity Establishment (ICE) feature is active, the function parses Session Description Protocol attributes from incoming SIP INVITE requests. A memcpy call copies the incoming string into a 256-byte stack buffer. No length check. Send a candidate attribute longer than 256 bytes and you have your overflow — textbook stack smashing, just wrapped in VoIP protocol layers.
Rapid7 researcher Stephen Fewer found the flaw and published the full technical breakdown. His team also dropped a working exploit module for Metasploit, so the bar to exploitation is now "download and run."
ASLR is enabled on the affected devices. It doesn't much matter. The implementation fails to randomize the load addresses of shared object libraries — libc included — so those addresses stay constant across reboots. Fewer's exploit builds a ROP chain against those fixed addresses and calls system() to execute arbitrary OS commands. Broken ASLR making a buffer overflow far easier to weaponize is a story as old as embedded Linux, but it keeps showing up.
Affected hardware spans the entire HP Poly VVX series and the Trio 8300, 8500, and 8800 conference devices. Fixed versions are UCS 6.4.8 for VVX, 8.1.7 for Trio 8300, and 7.2.8 for Trio 8500 and 8800. ICE is off by default; HP advises disabling it if you're not using it.
The reason this particular bug carries extra weight right now is audio. Conference phones sit at the center of executive calls, board discussions, and M&A conversations. Rapid7's director of vulnerability intelligence Douglas McKee put it plainly: attackers no longer need massive audio datasets to do something useful with synthetic speech tooling. A few minutes of clean source audio from the right person is enough. Voice infrastructure, McKee noted, can now serve both traditional espionage and AI-enabled fraud — wire transfer approvals, access requests, impersonation of a CFO — from a single persistent foothold.
Embedded VoIP hardware already gets skipped by most EDR deployments. It sits on the network, largely unmonitored, for years. Patch now, audit ICE feature status across your Poly fleet, and treat these devices the same way you'd treat any other internet-reachable Linux host — because that's exactly what they are.
