{"schema_version":1,"title":"Osmocom vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Osmocom: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-104598, was published on 26 October 2026. 7 vulnerabilities in the last four weeks, up 75% on the four before (4). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/osmocom","json_url":"https://junglewise.ai/threats/vendors/osmocom.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/osmocom","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":3,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":7,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2026-104598","slug":"cve-2026-104598-libosmo-sigtran-through-2-2-1-contains-an-out-of-bounds-read-in","title":"libosmo-sigtran out-of-bounds read in M3UA NOTIFY decoder","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:37.893+00:00","url":"https://junglewise.ai/threats/cve-2026-104598-libosmo-sigtran-through-2-2-1-contains-an-out-of-bounds-read-in"},{"cve":"CVE-2026-104597","slug":"cve-2026-104597-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in","title":"libosmocore out-of-bounds read in IuUP initialization","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:37.78+00:00","url":"https://junglewise.ai/threats/cve-2026-104597-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in"},{"cve":"CVE-2026-104596","slug":"cve-2026-104596-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the","title":"libosmocore out-of-bounds read in GSM 04.80 parser","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:37.573+00:00","url":"https://junglewise.ai/threats/cve-2026-104596-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the"},{"cve":"CVE-2026-104594","slug":"cve-2026-104594-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the","title":"libosmocore out-of-bounds read in IPA CCM identity-tag parsing","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.7+00:00","url":"https://junglewise.ai/threats/cve-2026-104594-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the"},{"cve":"CVE-2026-104593","slug":"cve-2026-104593-osmo-msc-through-1-15-0-contains-a-stack-based-buffer-overflow","title":"osmo-msc stack-based buffer overflow in decode_mme_name()","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.58+00:00","url":"https://junglewise.ai/threats/cve-2026-104593-osmo-msc-through-1-15-0-contains-a-stack-based-buffer-overflow"},{"cve":"CVE-2026-104592","slug":"cve-2026-104592-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in-the","title":"libosmocore out-of-bounds read in CBSP decoder","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.467+00:00","url":"https://junglewise.ai/threats/cve-2026-104592-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in-the"},{"cve":"CVE-2026-104591","slug":"cve-2026-104591-libosmocore-through-1-14-1-contains-a-buffer-overflow-in-osmo","title":"libosmocore buffer overflow in osmo_iuup_compute_payload_crc()","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.257+00:00","url":"https://junglewise.ai/threats/cve-2026-104591-libosmocore-through-1-14-1-contains-a-buffer-overflow-in-osmo"},{"cve":"CVE-2026-75895","cvss":7.5,"epss":0.0042,"slug":"cve-2026-75895-in-libsmpp35-from-0-1-0-through-1-8-0-out-of-bound-read-issue-was","title":"libsmpp34 out-of-bounds read in smpp34_unpack function","severity":"high","exploited":false,"published_at":"2026-09-18T20:17:21.487+00:00","url":"https://junglewise.ai/threats/cve-2026-75895-in-libsmpp35-from-0-1-0-through-1-8-0-out-of-bound-read-issue-was"},{"cve":"CVE-2026-75894","cvss":7.5,"epss":0.0055,"slug":"cve-2026-75894-in-osmo-iuh-from-0-1-0-through-1-8-0-a-reachable-assertion-was","title":"Osmocom osmo-iuh assertion failure in RANAP NAS-PDU handling","severity":"high","exploited":false,"published_at":"2026-09-18T19:16:45.967+00:00","url":"https://junglewise.ai/threats/cve-2026-75894-in-osmo-iuh-from-0-1-0-through-1-8-0-a-reachable-assertion-was"},{"cve":"CVE-2026-75893","cvss":7.5,"epss":0.0046,"slug":"cve-2026-75893-in-osmo-bsc-from-1-0-1-through-1-14-1-a-heap-based-buffer","title":"Osmocom osmo-bsc heap buffer overflow in ipaccess proxy","severity":"high","exploited":false,"published_at":"2026-09-18T19:16:45.86+00:00","url":"https://junglewise.ai/threats/cve-2026-75893-in-osmo-bsc-from-1-0-1-through-1-14-1-a-heap-based-buffer"},{"cve":"CVE-2026-75892","cvss":6.5,"epss":0.0028,"slug":"cve-2026-75892-in-osmo-ggsn-1-14-0-an-out-of-bounds-write-issue-was-found-in-the","title":"osmo-ggsn out-of-bounds write in PDP context GSN-Address decode","severity":"medium","exploited":false,"published_at":"2026-09-18T19:16:45.747+00:00","url":"https://junglewise.ai/threats/cve-2026-75892-in-osmo-ggsn-1-14-0-an-out-of-bounds-write-issue-was-found-in-the"}],"vendor":{"hub":true,"name":"Osmocom","slug":"osmocom","description":"German telecommunications software project providing open-source cellular network infrastructure and tools.","url":"https://junglewise.ai/threats/vendors/osmocom"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-75894","cvss":7.5,"epss":0.0055,"slug":"cve-2026-75894-in-osmo-iuh-from-0-1-0-through-1-8-0-a-reachable-assertion-was","title":"Osmocom osmo-iuh assertion failure in RANAP NAS-PDU handling","severity":"high","exploited":false,"published_at":"2026-09-18T19:16:45.967+00:00","url":"https://junglewise.ai/threats/cve-2026-75894-in-osmo-iuh-from-0-1-0-through-1-8-0-a-reachable-assertion-was"},{"cve":"CVE-2026-75893","cvss":7.5,"epss":0.0046,"slug":"cve-2026-75893-in-osmo-bsc-from-1-0-1-through-1-14-1-a-heap-based-buffer","title":"Osmocom osmo-bsc heap buffer overflow in ipaccess proxy","severity":"high","exploited":false,"published_at":"2026-09-18T19:16:45.86+00:00","url":"https://junglewise.ai/threats/cve-2026-75893-in-osmo-bsc-from-1-0-1-through-1-14-1-a-heap-based-buffer"},{"cve":"CVE-2026-75895","cvss":7.5,"epss":0.0042,"slug":"cve-2026-75895-in-libsmpp35-from-0-1-0-through-1-8-0-out-of-bound-read-issue-was","title":"libsmpp34 out-of-bounds read in smpp34_unpack function","severity":"high","exploited":false,"published_at":"2026-09-18T20:17:21.487+00:00","url":"https://junglewise.ai/threats/cve-2026-75895-in-libsmpp35-from-0-1-0-through-1-8-0-out-of-bound-read-issue-was"},{"cve":"CVE-2026-75892","cvss":6.5,"epss":0.0028,"slug":"cve-2026-75892-in-osmo-ggsn-1-14-0-an-out-of-bounds-write-issue-was-found-in-the","title":"osmo-ggsn out-of-bounds write in PDP context GSN-Address decode","severity":"medium","exploited":false,"published_at":"2026-09-18T19:16:45.747+00:00","url":"https://junglewise.ai/threats/cve-2026-75892-in-osmo-ggsn-1-14-0-an-out-of-bounds-write-issue-was-found-in-the"},{"cve":"CVE-2026-104598","slug":"cve-2026-104598-libosmo-sigtran-through-2-2-1-contains-an-out-of-bounds-read-in","title":"libosmo-sigtran out-of-bounds read in M3UA NOTIFY decoder","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:37.893+00:00","url":"https://junglewise.ai/threats/cve-2026-104598-libosmo-sigtran-through-2-2-1-contains-an-out-of-bounds-read-in"},{"cve":"CVE-2026-104597","slug":"cve-2026-104597-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in","title":"libosmocore out-of-bounds read in IuUP initialization","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:37.78+00:00","url":"https://junglewise.ai/threats/cve-2026-104597-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in"},{"cve":"CVE-2026-104596","slug":"cve-2026-104596-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the","title":"libosmocore out-of-bounds read in GSM 04.80 parser","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:37.573+00:00","url":"https://junglewise.ai/threats/cve-2026-104596-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the"},{"cve":"CVE-2026-104594","slug":"cve-2026-104594-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the","title":"libosmocore out-of-bounds read in IPA CCM identity-tag parsing","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.7+00:00","url":"https://junglewise.ai/threats/cve-2026-104594-libosmocore-through-1-14-1-contains-out-of-bounds-reads-in-the"},{"cve":"CVE-2026-104593","slug":"cve-2026-104593-osmo-msc-through-1-15-0-contains-a-stack-based-buffer-overflow","title":"osmo-msc stack-based buffer overflow in decode_mme_name()","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.58+00:00","url":"https://junglewise.ai/threats/cve-2026-104593-osmo-msc-through-1-15-0-contains-a-stack-based-buffer-overflow"},{"cve":"CVE-2026-104592","slug":"cve-2026-104592-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in-the","title":"libosmocore out-of-bounds read in CBSP decoder","severity":"info","exploited":false,"published_at":"2026-10-26T19:16:28.467+00:00","url":"https://junglewise.ai/threats/cve-2026-104592-libosmocore-through-1-14-1-contains-an-out-of-bounds-read-in-the"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Osmocom Libosmocore","slug":"libosmocore","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/libosmocore"}]}