VulnerabilityDeferred

CVE-2026-104596

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c.

UnscoredEPSS —

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain sensitive information.

CVSS: Not yet scored
EPSS: No score yet
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Source: cve@mitre.org

References

https://github.com/osmocom/libosmocore/commit/b6c8c72c0c063ab2f293c5226472341c432454c2
https://osmocom.org/issues/7051

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.