Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Osmocom Clear all filters
TI-2026-53128 CVE-2026-75895 · GHSA-fpm9-38vr-4gp8

Out of bounds read at smpp34_unpack()

Priority LOW 39

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00432 Published 2026-09-18 Fixed in 1.14.5 CWE-125
TI-2026-53127 CVE-2026-75894 · GHSA-g4v5-w6q6-j5cq

Reachable assertion at ranap_handle_co_dt()

Priority LOW 39

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00314 Published 2026-09-18 Fixed in 1.8.0 CWE-617
TI-2026-53126 CVE-2026-75893 · GHSA-5p56-5h9g-2gjv

Heap based buffer overflow at ipaccess_proxy_read_msg()

Priority LOW 39

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg() function via IPA frame lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00458 Published 2026-09-18 Fixed in 1.14.1 CWE-122
TI-2026-53125 CVE-2026-75892 · GHSA-mp35-rp3g-prrg

Out of bounds write in PDP ctx GSN-Address decode

Priority LOW 35

In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory corruption.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00281 Published 2026-09-18 No fix listed CWE-787