CVE-2026-104591
Description
A flaw was found in libosmocore. A buffer overflow vulnerability exists in the osmo_iuup_compute_payload_crc() function during payload checksum calculation. A remote attacker could exploit this flaw to crash the application, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated Important because unauthenticated remote network traffic can cause an immediate denial of service across systems utilizing libosmocore for cellular protocol handling. While the defect allows unauthenticated crashes over the network without user interaction, libosmocore is not included or supported in Red Hat Enterprise Linux products. Consequently, standard enterprise deployments are not exposed to this issue.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
