{"id":"CVE-2026-104598","aliases":["DEBIAN-CVE-2026-104598","EUVD-2026-110095","GHSA-wjvp-f88x-8jqw","UBUNTU-CVE-2026-104598"],"status":"published","title":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src...","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00389,"percentile":0.3351,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-10-26T00:00:00Z","modified":"2026-11-04T02:47:07Z","fixes":[{"ecosystem":"Debian:14","package":"libosmo-sigtran","fixed_in":["2.3.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"libosmo-sigtran","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-3","2.2.1-1","2.2.1-2","2.2.1-3","2.3.0-1","2.3.0-2"]},{"source":"osv","ecosystem":"Debian:14","package":"libosmo-sigtran","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1"}]}],"versions":["2.1.0-3","2.2.1-1","2.2.1-2","2.2.1-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libosmo-sigtran","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libosmo-sigtran","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-3","2.1.0-3build1"]}],"references":[{"url":"https://osmocom.org/issues/7056","tags":["exploit","web","report"]},{"url":"https://github.com/osmocom/libosmo-sigtran/commit/b554131f2cbb20ca9a9cf51ca17d73f644eff1f8","tags":["fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104598","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wjvp-f88x-8jqw"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104598.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-104598","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-104598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-104598","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-104598","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-02T16:33:09.481Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T18:00:08.034842Z"}],"euvd":[{"id":"EUVD-2026-110095","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-02T16:33:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T05:08:40.251173Z"}],"ghsa":[{"id":"GHSA-wjvp-f88x-8jqw","title":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src...","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T21:36:08Z","modified":"2026-11-02T18:32:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T19:02:39.544035Z"}],"nvd":[{"id":"CVE-2026-104598","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T20:17:37.893Z","modified":"2026-11-02T17:17:32.08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T20:51:42.820268Z"}],"osv":[{"id":"CVE-2026-104598","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-11T10:47:22.746057091Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-11T03:22:04.464623Z"},{"id":"DEBIAN-CVE-2026-104598","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T20:17:37.893Z","modified":"2026-11-03T10:00:29.311629726Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T10:27:58.933618Z"},{"id":"UBUNTU-CVE-2026-104598","description":"libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information.","status":"published","published":"2026-10-26T20:17:00Z","modified":"2026-11-04T03:30:17.049164543Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-04T03:56:39.110241Z"}]}}