UBUNTU-CVE-2026-104593: Buffer Overflow
Published Oct 26, 2026
·Updated
osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename() in src/libmsc/sgsiface.c. This allows a remote attacker to cause a denial of service.
Affected Software
5 affected components
ubuntu/osmo-msc*
ubuntu/osmo-msc*
ubuntu/osmo-msc*
ubuntu/osmo-msc*
ubuntu/osmo-msc*
Event History
Oct 26, 2026
CVE Published
via OSV·07:16 PM
Data Sourced
via OSV·07:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to do to exploit this issue?
An attacker must be able to send crafted remote input that reaches decode_mme_name() in src/libmsc/sgs_iface.c. The documented impact is denial of service.
2
Which versions are affected?
The issue is reported in osmo-msc through version 1.15.0. The provided data does not identify a fixed version or Ubuntu package update.
3
Is remote exploitation possible?
Yes. The vulnerability is described as remotely exploitable, so systems that expose the affected SGS interface to untrusted or attacker-controlled peers are the relevant exposure scenario.