libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c.

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

Kaynaklar6 kaynak

• CVE.org kaydı
• NVD kaydı
• osmocom.org/issues/7050 Diğer
• github.com/…ommit/8ba652bca2f28ec05ff5979846199e2c46657633 Diğer
• github.com/…ommit/325ffb5204d7e1659ca2fec3b2f14c33b969ee71 Diğer
• github.com/…ommit/afd18bf00147e17c495fc909ac4583b3bf734d53 Diğer

Kayıt geçmişi

1. 30 Eki 2026 20:30CVSS puanı değişti: – → 7.5
2. 26 Eki 2026 03:00Yayımlandı

İlgili açıklar

• 7,9 CVE-2026-62958libriscv: Out of bounds read vuln in the ELF parser (Denial of service)
• 6,9 CVE-2026-119338Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages
• 5,9 CVE-2026-119299gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments
• 7,8 CVE-2026-119722Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()
• 5,5 CVE-2026-119720Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block
• 6,1 CVE-2026-119721Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors