CVE Watch26 oct 2026

CVE-2026-104592

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 26 oct 2026 · Última mod.: 26 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

Referencias oficiales

gerrit.osmocom.orghttps://gerrit.osmocom.org/c/libosmocore/+/43215
github.comhttps://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6
osmocom.orghttps://osmocom.org/issues/7053

CVEs relacionados

Sin CVEs relacionados por CWE o producto.