PULSE
ES
FEED
ransomwhitearmor reclama a Verification · Technologyransomulose reclama a zzq-testransomulose reclama a probe-011637cabbf94076-ransomdragonforce reclama a Zhito Technology · UA · Technologyransomsilentransomgroup reclama a Morrison Cohen · US · Professional Servicesransomemperador reclama a Afflelou · FR · Retail & E-Commerceransombyod reclama a University of New Mexico · US · Educationransomrhysida reclama a MISC Group · MY · Energy & Utilitiesransomn0n reclama a Ingelectus Innovative Electrical Solutions S.L. · ES · Energy & Utilitiesransomwhitearmor reclama a Gamdom · Otherransomfalcon reclama a Beasley Allen Law Firm · US · Professional Servicesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilitiesransomwhitearmor reclama a Verification · Technologyransomulose reclama a zzq-testransomulose reclama a probe-011637cabbf94076-ransomdragonforce reclama a Zhito Technology · UA · Technologyransomsilentransomgroup reclama a Morrison Cohen · US · Professional Servicesransomemperador reclama a Afflelou · FR · Retail & E-Commerceransombyod reclama a University of New Mexico · US · Educationransomrhysida reclama a MISC Group · MY · Energy & Utilitiesransomn0n reclama a Ingelectus Innovative Electrical Solutions S.L. · ES · Energy & Utilitiesransomwhitearmor reclama a Gamdom · Otherransomfalcon reclama a Beasley Allen Law Firm · US · Professional Servicesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilities
← All CVEs
CVE WatchOct 26, 2026

CVE-2026-104597

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to ob

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 26, 2026 · Last modified: Oct 26, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.

Official references
Related CVEs

No related CVEs by CWE or product.