CVE-2026-104591 Details
Description
libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.
A stack buffer overflow vulnerability has been identified in libosmocore versions through 1.14.1, specifically within the osmo_iuup_compute_payload_crc() function in src/gsm/iuup.c. This vulnerability allows a remote attacker to cause a denial-of-service by sending an IuUP payload that exceeds 1024 bytes, which is not properly validated before being processed. The overflow can lead to memory corruption, although it has not been demonstrated to allow control of execution.
Users can upgrade to libosmocore version 1.14.2, which addresses the vulnerability by adding proper length checks and increasing the buffer size to accommodate larger IuUP payloads.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Oct 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/osmocom/libosmocore/commit/0b0f165106b7918435a47f8cb28c651228b8e4aa | [email protected] | Source CodeVendor |
| https://osmocom.org/issues/7052 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| libosmocore | >= 1.13.0, <= 1.14.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 29, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |