{"id":"CVE-2026-104597","title":"libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c","summary":"libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.","severity":"none","published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T19:24:14.234Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-104597","references":[{"url":"https://osmocom.org/issues/7052"},{"url":"https://github.com/osmocom/libosmocore/commit/89e5ade1a01953752a53d83da4ba0b3ddbc30e30"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T19:38:01.120Z","epss":0.00234,"epssPercentile":0.1426,"slug":"CVE-2026-104597","body":"## Overview\n\nlibosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}