CVE-2026-75894

Summary

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

Affected Software

VendorProductVersion RangeStatus
Osmocomosmo-iuh0.1.0 < 1.8.0affected

Weaknesses

  • CWE-617: CWE-617 Reachable assertion

References