CVEvulnerability

CVE-2026-104593

Published 2026-10-26 Modified 2026-10-27 Official page ↗

Status: Deferred
Published: 2026-10-26
Last modified: 2026-10-27
Assigner: [email protected]

Description

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.

References

https://github.com/osmocom/osmo-msc/commit/cd347bbe5392d8170ab87140b2bfdac683058b09 github.com
https://osmocom.org/issues/7058 osmocom.org