VulnerabilityDeferred

CVE-2026-104591

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c.

UnscoredEPSS —

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.

CVSS: Not yet scored
EPSS: No score yet
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Source: cve@mitre.org

References

https://github.com/osmocom/libosmocore/commit/0b0f165106b7918435a47f8cb28c651228b8e4aa
https://osmocom.org/issues/7052

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.