CVE-2026-104597: Osmocom libosmocore vulnerability

Q: What versions are affected?

The issue is reported in libosmocore through version 1.14.1. The provided data does not identify the first fixed release.

Q: What does an attacker need to exploit this issue?

The vulnerability is described as remotely exploitable, so an attacker would need a way to send input that reaches iuup_rx_initialization() in src/gsm/iuup.c. The provided information does not specify the protocol exposure, required authentication, or configuration conditions.

Q: What is the potential impact?

Successful exploitation can cause an out-of-bounds read and allow a remote attacker to obtain sensitive information. The provided data does not state what information may be disclosed or whether the issue can cause denial of service or code execution.

Published Oct 26, 2026

Updated

libosmocore through 1.14.1 contains an out-of-bounds read in iuuprxinitialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.

Affected Software

1 affected component

Osmocom libosmocore<=1.14.1

Event History

Oct 26, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What versions are affected?

The issue is reported in libosmocore through version 1.14.1. The provided data does not identify the first fixed release.

What does an attacker need to exploit this issue?

The vulnerability is described as remotely exploitable, so an attacker would need a way to send input that reaches iuup_rx_initialization() in src/gsm/iuup.c. The provided information does not specify the protocol exposure, required authentication, or configuration conditions.

What is the potential impact?

Successful exploitation can cause an out-of-bounds read and allow a remote attacker to obtain sensitive information. The provided data does not state what information may be disclosed or whether the issue can cause denial of service or code execution.

CVE-2026-104597: Osmocom libosmocore vulnerability

Affected Software

Event History

Frequently Asked Questions

What versions are affected?

What does an attacker need to exploit this issue?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

What versions are affected?

What does an attacker need to exploit this issue?

What is the potential impact?