UBUNTU-CVE-2026-104598: Medium severity ubuntu/libosmo-sigtran vulnerability

Published Oct 26, 2026

Updated

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.

Affected Software

2 affected components

ubuntu/libosmo-sigtran*

Event History

Oct 26, 2026

CVE Published

via OSV·08:17 PM

Data Sourced

via OSV·08:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue is described as remotely exploitable, so an attacker does not need local access. Exploitation targets the M3UA NOTIFY decoder.

Which versions are known to be affected?

libosmo-sigtran through version 2.2.1 is affected.

What is the likely impact of successful exploitation?

Successful exploitation can cause an out-of-bounds read and allow disclosure of sensitive information.

UBUNTU-CVE-2026-104598: Medium severity ubuntu/libosmo-sigtran vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which versions are known to be affected?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which versions are known to be affected?

What is the likely impact of successful exploitation?