CVE-2026-75893CWE-122

CVE-2026-75893

High · published September 18, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  function via IPA frame lengths.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-09-18T23:16Z
References (1)
https://cgit.osmocom.org/osmo-bsc/commit/?id=2852a03c153cd9418c2a86d0b2193ac41169dbb7 · 74b3a70d-cca6-4d34-9789-e83b222ae3be
EPSS history
Timeline
  • 20 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 18 SEP 18:40Z
    Heap based buffer overflow at ipaccess_proxy_read_msg()
    cvelistv5