CVEvulnerability

CVE-2026-75895

7.5 HIGH Published 2026-09-18 Modified 2026-09-30 Official page ↗

Status: Awaiting Analysis
Published: 2026-09-18
Last modified: 2026-09-30
Assigner: 74b3a70d-cca6-4d34-9789-e83b222ae3be
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-125

Description

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

Weakness · CWE (1)

CWE-125 Out-of-bounds Read weakness

References

https://cgit.osmocom.org/libsmpp34/commit/?id=af0e2912057551dab97bbe26e6a41f18a75f3bbb cgit.osmocom.org
https://lists.debian.org/debian-lts-announce/2026/09/msg00038.html lists.debian.org

CVE-2026-75895

Description

Related

Weakness · CWE (1)

References