Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-75894

Reachable assertion at ranap_handle_co_dt()

Description

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Osmocom osmo-iuh

Default version status: unknown

  • 0.1.0 to < 1.8.0affected

References