Osmocom vulnerabilities
Published CVEs affecting Osmocom products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-75895
High · 7.5
CWE-125 Sep 18, 2026
Out of bounds read at smpp34_unpack()
In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.
CVE-2026-75894
High · 7.5
CWE-617 Sep 18, 2026
Reachable assertion at ranap_handle_co_dt()
In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.
CVE-2026-75893
High · 7.5
CWE-122 Sep 18, 2026
Heap based buffer overflow at ipaccess_proxy_read_msg()
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths.
CVE-2026-75892
Medium · 6.5
CWE-787 Sep 18, 2026
Out of bounds write in PDP ctx GSN-Address decode
In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.