Skip to content
OpenAdvisories

Vendor

Osmocom

4 known vulnerabilities.

Products

osmo-iuh 1 osmo-ggsn 1 libsmpp34 1 osmo-bsc 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-75895

    Out of bounds read at smpp34_unpack()

    In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

    Osmocom libsmpp34 libsmpp34 libsmpp34 Debian Ubuntu
  • High 7.5
    CVE-2026-75894

    Reachable assertion at ranap_handle_co_dt()

    In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

    Osmocom osmo-iuh osmo-iuh osmo-iuh Debian Ubuntu
  • High 7.5
    CVE-2026-75893

    Heap based buffer overflow at ipaccess_proxy_read_msg()

    In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  function via IPA frame lengths.

    Osmocom osmo-bsc osmo-bsc osmo-bsc Debian Ubuntu