CVE-2026-104593: Buffer Overflow

Q: Who is exposed to this issue?

Deployments running Osmocom osmo-msc version 1.15.0 or earlier are affected by the reported vulnerable code path.

Q: What can an attacker achieve?

A remote attacker can trigger the stack-based buffer overflow in decode_mme_name() and cause a denial of service.

Q: What should be done to remediate the issue?

Update to a version that includes the fix referenced by commit cd347bbe5392d8170ab87140b2bfdac683058b09. The provided data does not identify the first fixed release.

Published Oct 26, 2026

Updated

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename() in src/libmsc/sgsiface.c. This allows a remote attacker to cause a denial of service.

Affected Software

1 affected component

Osmocom osmo-msc<=1.15.0

Event History

Oct 26, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

Who is exposed to this issue?

Deployments running Osmocom osmo-msc version 1.15.0 or earlier are affected by the reported vulnerable code path.

What can an attacker achieve?

A remote attacker can trigger the stack-based buffer overflow in decode_mme_name() and cause a denial of service.

What should be done to remediate the issue?

Update to a version that includes the fix referenced by commit cd347bbe5392d8170ab87140b2bfdac683058b09. The provided data does not identify the first fixed release.

CVE-2026-104593: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What can an attacker achieve?

What should be done to remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What can an attacker achieve?

What should be done to remediate the issue?