CVE-2026-104592

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-104592", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-10-30T18:11:30.724Z", "dateReserved": "2026-10-02T00:00:00.000Z", "datePublished": "2026-10-26T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-26T18:46:16.490Z"}, "descriptions": [{"lang": "en", "value": "libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://osmocom.org/issues/7053"}, {"url": "https://gerrit.osmocom.org/c/libosmocore/+/43215"}, {"url": "https://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-125", "lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-10-26T19:32:51.174741Z", "id": "CVE-2026-104592", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T18:11:30.724Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-104592", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-26T19:32:51.174741Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-26T19:32:48.510Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://osmocom.org/issues/7053"}, {"url": "https://gerrit.osmocom.org/c/libosmocore/+/43215"}, {"url": "https://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6"}], "descriptions": [{"lang": "en", "value": "libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-10-26T18:46:16.490Z"}}}, "cveMetadata": {"cveId": "CVE-2026-104592", "state": "PUBLISHED", "dateUpdated": "2026-10-30T18:11:30.724Z", "dateReserved": "2026-10-02T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-10-26T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service."}], "id": "CVE-2026-104592", "lastModified": "2026-10-30T19:17:54.907", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-104592", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-26T19:32:51.174741Z", "version": "2.0.3"}}]}, "published": "2026-10-26T19:16:28.467", "references": [{"source": "cve@mitre.org", "url": "https://gerrit.osmocom.org/c/libosmocore/+/43215"}, {"source": "cve@mitre.org", "url": "https://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6"}, {"source": "cve@mitre.org", "url": "https://osmocom.org/issues/7053"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "libosmocore: libosmocore: Denial of Service via out-of-bounds read in CBSP decoder", "id": "2561029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2561029"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.c. This allows a remote attacker to cause a denial of service.", "A flaw was found in libosmocore. An out-of-bounds read vulnerability in the Cell Broadcast Service Protocol (CBSP) message decoder allows a remote attacker to cause a Denial of Service (DoS). By sending specially crafted CBSP WRITE-REPLACE messages, an attacker can trigger an invalid memory read, causing the service to crash."], "name": "CVE-2026-104592", "public_date": "2026-10-26T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-104592\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-104592\nhttps://gerrit.osmocom.org/c/libosmocore/+/43215\nhttps://github.com/osmocom/libosmocore/commit/1659b5874223934d5586e3e96b7d59f653c90ea6\nhttps://osmocom.org/issues/7053"], "statement": "This vulnerability is rated with an Important severity because an unauthenticated network adversary can cause complete service unavailability remotely without requiring user interaction. Network services utilizing the protocol parser handle incoming broadcast communication directly, making unexpected memory access result in a crash. Red Hat Enterprise Linux does not distribute or support libosmocore, restricting any potential impact to community distributions such as Fedora.", "threat_severity": "Important"}

{"created": "2026-10-26T20:30:15.339203+00:00", "updated": "2026-10-30T21:00:26.894068+00:00", "vendors": []}