CVE-2026-104594
libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.
n/a n/a
CVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Affected versions 1
- n/aaffected: n/aCVE List
References 4
- github.com/osmocom/libosmocore/commit/8ba652bca2f28ec05ff5979846199e2c46657633Fixvia CVE List
- github.com/osmocom/libosmocore/commit/325ffb5204d7e1659ca2fec3b2f14c33b969ee71Fixvia CVE List
- github.com/osmocom/libosmocore/commit/afd18bf00147e17c495fc909ac4583b3bf734d53Fixvia CVE List
- osmocom.org/issues/7050Referencevia CVE List