CVE WatchOct 26, 2026

CVE-2026-104592

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 26, 2026 · Last modified: Oct 26, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

Official references

gerrit.osmocom.orghttps://gerrit.osmocom.org/c/libosmocore/+/43215
github.comhttps://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6
osmocom.orghttps://osmocom.org/issues/7053

Related CVEs

No related CVEs by CWE or product.