UBUNTU-CVE-2026-104592: Medium severity ubuntu/libosmocore vulnerability

Published Oct 26, 2026

Updated

libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.

Affected Software

7 affected components

ubuntu/libosmocore*

Event History

Oct 26, 2026

CVE Published

via OSV·07:16 PM

Data Sourced

via OSV·07:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Does exploitation require local access to the affected host?

No. The issue is described as remotely exploitable. The available information does not specify authentication requirements or any additional preconditions.

How can I identify systems that may be affected?

Check whether the system uses libosmocore version 1.14.1 or earlier. The provided information does not identify corresponding Ubuntu package versions or fixed package releases.

UBUNTU-CVE-2026-104592: Medium severity ubuntu/libosmocore vulnerability

Affected Software

Event History

Frequently Asked Questions

Does exploitation require local access to the affected host?

How can I identify systems that may be affected?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require local access to the affected host?

How can I identify systems that may be affected?