CVE-2026-104592: Libosmocore vulnerability

Q: Who is exposed to this issue?

Deployments using libosmocore through version 1.14.1 are affected if they process remotely supplied CBSP WRITE-REPLACE messages.

Q: What does an attacker need to do to exploit it?

An attacker needs the ability to send a crafted CBSP WRITE-REPLACE message to a vulnerable decoder. Successful exploitation can cause an out-of-bounds read and denial of service.

Q: How can I determine whether my deployment is affected?

Check whether your software uses libosmocore version 1.14.1 or earlier and whether it handles CBSP WRITE-REPLACE decoding in src/gsm/cbsp.c.

Published Oct 26, 2026

Updated

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

Affected Software

1 affected component

libosmocore<=1.14.1

Event History

Oct 26, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

Who is exposed to this issue?

Deployments using libosmocore through version 1.14.1 are affected if they process remotely supplied CBSP WRITE-REPLACE messages.

What does an attacker need to do to exploit it?

An attacker needs the ability to send a crafted CBSP WRITE-REPLACE message to a vulnerable decoder. Successful exploitation can cause an out-of-bounds read and denial of service.

How can I determine whether my deployment is affected?

Check whether your software uses libosmocore version 1.14.1 or earlier and whether it handles CBSP WRITE-REPLACE decoding in src/gsm/cbsp.c.

CVE-2026-104592: Libosmocore vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to exploit it?

How can I determine whether my deployment is affected?