CVE-2026-104591

CVSS 7.5 (high) · published 2026-10-26

libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.c. This allows a remote attacker to cause a denial of service.

Weakness: CWE-400

Source: NVD CVE-2026-104591

References

• https://github.com/osmocom/libosmocore/commit/0b0f165106b7918435a47f8cb28c651228b8e4aa
• https://osmocom.org/issues/7052

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.