CVE-2026-104594
libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.
- Update to 1.14.2-1
Published Updated
PatchFirst · Latest vulnerabilities
libosmocore vulnerabilities
Vulnerabilities published for libosmocore in the last 30 days: 3. Listed in the KEV catalogue: 0.
Vulnerabilities: 3
CVE-2026-104592
libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.
- Update to 1.14.2-1
Published UpdatedCVE-2026-104591
libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.
- Update to 1.14.2-1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.