CVE-2026-104593 Details
Description
osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.
A stack-based buffer overflow vulnerability has been identified in Osmo MSC versions through 1.15.0. The issue arises in the MME name decoding function within the SGS interface, where the decoder fails to properly validate the length of the MME name before copying it to a stack buffer. This oversight allows remote attackers to send overly long MME names, leading to a buffer overflow and potential denial-of-service condition.
Users can upgrade to Osmo MSC version 1.16.0, which includes a patch that properly validates the length of the MME name before decoding it, preventing the buffer overflow.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 26, 2026CISA-ADP
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/osmocom/osmo-msc/commit/cd347bbe5392d8170ab87140b2bfdac683058b09 | [email protected] | Source CodeVendor |
| https://osmocom.org/issues/7058 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| Osmocom OsmoMSC | <= 1.15.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | CVE Modified | CISA-ADP |
| Oct 26, 2026 | New CVE Received | [email protected] |