{"id":"CVE-2026-104598","title":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c","summary":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","severity":"none","published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T19:27:08.390Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-104598","references":[{"url":"https://osmocom.org/issues/7056"},{"url":"https://github.com/osmocom/libosmo-sigtran/commit/b554131f2cbb20ca9a9cf51ca17d73f644eff1f8"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T19:38:01.118Z","epss":0.00234,"epssPercentile":0.1426,"slug":"CVE-2026-104598","body":"## Overview\n\nlibosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}