Read the docs

Osmocom

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Osmocom records in CISA KEV

No Osmocom vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-53128 CVE-2026-75895 · GHSA-fpm9-38vr-4gp8

Out of bounds read at smpp34_unpack()

Priority LOW 39

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00432 Published 2026-09-18 Fixed in 1.14.5 CWE-125
TI-2026-53127 CVE-2026-75894 · GHSA-g4v5-w6q6-j5cq

Reachable assertion at ranap_handle_co_dt()

Priority LOW 39

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00314 Published 2026-09-18 Fixed in 1.8.0 CWE-617
TI-2026-53126 CVE-2026-75893 · GHSA-5p56-5h9g-2gjv

Heap based buffer overflow at ipaccess_proxy_read_msg()

Priority LOW 39

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-09-18 Fixed in 1.14.1 CWE-122
TI-2026-53125 CVE-2026-75892 · GHSA-mp35-rp3g-prrg

Out of bounds write in PDP ctx GSN-Address decode

Priority LOW 35

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00281 Published 2026-09-18 No fix listed CWE-787
Open these records in search →