CyberSecBulletin

Osmocom vulnerabilities

We track 2 vulnerabilities in Osmocom products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Osmocom vulnerabilities

  • 7.5 High severity

    libsmpp34: Out-of-bounds Read

    CVE-2026-75895Osmocom

    In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

  • 7.5 High severity

    osmo-iuh: Reachable Assertion

    CVE-2026-75894Osmocom

    In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.