unscored
CVE-2026-104598
libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c.
Impact
libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.
Affected products
| Product | Affected versions |
|---|---|
| Libosmo-Sigtran | through 2.2.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.