Live › vulnerability › CVE-2026-104597
Go to dashboardlibosmocore through 1.14.1 has an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. A remote attacker can use it to obtain sensitive information from process memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 20:50 UTC. All times on this page are UTC.
Teams that run libosmocore in GSM or cellular core-network software, such as Osmocom components, that handles Iu user-plane traffic. The sources do not say which deployments reach the vulnerable IuUP initialization path by default. Teams that do not run libosmocore can skip it.
No product ranges from the sources yet.
pkg-config --modversion libosmocore and compare it to 1.14.1iuup.c or libosmocore in the dependency tree of any cellular or GSM tooling you run (unknown otherwise)1.14.1 once a fixed release is published (unknown whether one exists yet)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-104597")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.