Remote Denial of Service Vulnerability in osmo-iuh by Osmocom

CVE-2026-75894

What is CVE-2026-75894?

In osmo-iuh versions 0.1.0 through 1.8.0, a reachable assertion exists in the ranap_handle_co_dt() function. This vulnerability allows for an arbitrarily sized NAS-PDU to trigger a process crash, resulting in a remote denial of service. Attackers exploiting this flaw could disrupt service availability, underscoring the importance of applying security patches promptly. Mitigation strategies and updates are crucial for maintaining system integrity.

References