Unrated severityNVD Advisory· Published Oct 26, 2026

CVE-2026-104594

Description

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Osmocom/libosmocorellm-create
Range: <=1.14.1

Patches

Vulnerability mechanics

References

github.com/osmocom/libosmocore/commit/325ffb5204d7e1659ca2fec3b2f14c33b969ee71nvd
github.com/osmocom/libosmocore/commit/8ba652bca2f28ec05ff5979846199e2c46657633nvd
github.com/osmocom/libosmocore/commit/afd18bf00147e17c495fc909ac4583b3bf734d53nvd
osmocom.org/issues/7050nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000