Vulnerabilidades de Osmocom
CVEs publicadas que afetam produtos de Osmocom: 4 registro(s), com severidade, exploração e correções.
CVE-2026-75895
Alta · 7.5
CWE-125 18/09/2026
Out of bounds read at smpp34_unpack()
In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.
CVE-2026-75894
Alta · 7.5
CWE-617 18/09/2026
Reachable assertion at ranap_handle_co_dt()
In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.
CVE-2026-75893
Alta · 7.5
CWE-122 18/09/2026
Heap based buffer overflow at ipaccess_proxy_read_msg()
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths.
CVE-2026-75892
Média · 6.5
CWE-787 18/09/2026
Out of bounds write in PDP ctx GSN-Address decode
In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.