NetSight
unscored

CVE-2026-104597

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c.

Impact

libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.

Affected products

ProductAffected versions
Libosmocore
through 1.14.1

Versions were read from the advisory text. No structured product data has been published for this record yet.

References