medium6.5
CVE-2026-104592
libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c.
Impact
libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.
Affected products
| Product | Affected versions |
|---|---|
| Libosmocore | through 1.14.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-cwm8-hc2v-xwc3
- https://nvd.nist.gov/vuln/detail/CVE-2026-104592
- https://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6
- https://gerrit.osmocom.org/c/libosmocore/+/43215
- https://osmocom.org/issues/7053