DEBIAN-CVE-2026-104591: Buffer Overflow

Q: Who can exploit this issue?

A remote, unauthenticated attacker can exploit it over the network. No user interaction is required.

Q: What is the likely impact of successful exploitation?

Successful exploitation can cause a denial of service. The provided data does not indicate confidentiality or integrity impact.

Q: Which versions are affected?

libosmocore through version 1.14.1 is affected.

Published Oct 26, 2026

Updated

libosmocore through 1.14.1 contains a buffer overflow in osmoiuupcomputepayloadcrc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.

Affected Software

3 affected componentsFixes available

debian/libosmocore*

debian/libosmocore<1.14.2-1

1.14.2-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/libosmocore to a version that resolves this vulnerability.
Fixed in 1.14.2-1

Event History

Oct 26, 2026

CVE Published

via OSV·07:16 PM

Data Sourced

via OSV·07:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

A remote, unauthenticated attacker can exploit it over the network. No user interaction is required.

What is the likely impact of successful exploitation?

Successful exploitation can cause a denial of service. The provided data does not indicate confidentiality or integrity impact.

Which versions are affected?

libosmocore through version 1.14.1 is affected.

DEBIAN-CVE-2026-104591: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Which versions are affected?