CVE-2026-104594EPSS p15.5%

CVE-2026-104594CVE-2026-104594

Description

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

Scoring

EPSS0.24% probability of exploitation · percentile 15.5% · 2026-10-27T12:03:15Z
Last modified2026-10-27
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.