UBUNTU-CVE-2026-104596: Medium severity ubuntu/libosmocore vulnerability

Published Oct 26, 2026

Updated

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain sensitive information.

Affected Software

7 affected components

ubuntu/libosmocore*

Event History

Oct 26, 2026

CVE Published

via OSV·08:17 PM

Data Sourced

via OSV·08:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which libosmocore versions are affected?

The issue is reported in libosmocore through version 1.14.1. The provided data does not identify a fixed version.

What level of attacker access is involved?

The vulnerability is described as remotely exploitable. The provided information does not specify authentication, network placement, or other prerequisites.

UBUNTU-CVE-2026-104596: Medium severity ubuntu/libosmocore vulnerability

Affected Software

Event History

Frequently Asked Questions

Which libosmocore versions are affected?

What level of attacker access is involved?

Company

Resources

Contact

Frequently Asked Questions

Which libosmocore versions are affected?

What level of attacker access is involved?