These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-104598 is a vulnerability in libosmo-sigtran through 2.2.1, allowing remote attackers to obtain sensitive information via an out-of-bounds read in the M3UA NOTIFY decoder. This vulnerability affects libosmo-sigtran installations, which defenders should assess for exposure and prioritize patching to prevent potential data exposure. The CVE record and NVD entry provide limited information about the [truncated]
CVE-2026-104597 is a vulnerability in libosmocore through 1.14.1, allowing a remote attacker to obtain sensitive information via an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.c. This vulnerability affects systems using libosmocore, particularly those handling sensitive information. Defenders should assess exposure and prioritize patching. The CVE record and NVD entry provide limited in [truncated]
CVE-2026-104596 is a vulnerability in libosmocore through 1.14.1, allowing remote attackers to obtain sensitive information due to out-of-bounds reads in the GSM 04.80 supplementary-service component parsers. This vulnerability affects systems using libosmocore, and defenders should assess exposure and prioritize verification and updates. The CVE record and NVD entry provide limited information about the [truncated]
CVE-2026-104594 is a vulnerability in libosmocore through 1.14.1, allowing out-of-bounds reads in the IPA CCM identity-tag parsers. This could enable a remote attacker to obtain sensitive information. The vulnerability affects libosmocore installations, and defenders should assess exposure and prioritize patching. The IPA CCM identity-tag parsers in src/gsm/ipa.c are impacted, and the vulnerability allows [truncated]
A stack-based buffer overflow vulnerability exists in osmo-msc through version 1.15.0 in the decode_mme_name() function located in src/libmsc/sgs_iface.c. This vulnerability allows a remote attacker to cause a denial of service. The issue arises from inadequate input validation, enabling attackers to overflow the stack buffer. Defenders should verify and apply patches, monitor for exploitation attempts, a [truncated]
A vulnerability in libosmocore through 1.14.1 allows remote attackers to cause a denial of service due to an out-of-bounds read in the CBSP WRITE-REPLACE decoder. This vulnerability affects systems handling GSM CBSP messages, particularly those using libosmocore. Defenders should assess exposure and prioritize patching to prevent potential denial of service. The vulnerability has a significant impact on s [truncated]
A buffer overflow vulnerability exists in libosmocore through 1.14.1 in the osmo_iuup_compute_payload_crc() function, allowing remote attackers to cause a denial of service. This issue requires defenders to assess exposure, especially in systems with remote access, and prioritize patching to prevent potential operational impacts. The vulnerability's source confidence is limited, and further verification i [truncated]