libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in s…

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in src/gsm/gsm0480.c. This allows a remote attacker to obtain sensitive information.

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• osmocom.org/issues/7051 Diğer
• github.com/…ommit/b6c8c72c0c063ab2f293c5226472341c432454c2 Diğer

Kayıt geçmişi

1. 29 Eki 2026 23:30CVSS puanı değişti: – → 7.5
2. 26 Eki 2026 03:00Yayımlandı

İlgili açıklar

• 8,4 CVE-2026-62979jack: upstream error responses expose backend and peer credentials
• 6,5 CVE-2026-55098Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735
• 7,1 CVE-2026-119331Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation
• 7,5 CVE-2026-62264PDF Reader MCP: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY
• 7,5 CVE-2026-110305Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]'…
• 9,3 CVE-2026-61730SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount