🔐 CVE Alert

CVE-2026-75894

UNKNOWN 0.0

Reachable assertion at ranap_handle_co_dt()

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

CWE CWE-617
Vendor osmocom
Product osmo-iuh
Published Sep 18, 2026
Last Updated Sep 18, 2026
Stay Ahead of the Next One

Get instant alerts for osmocom osmo-iuh

Be the first to know when new unknown vulnerabilities affecting osmocom osmo-iuh are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Osmocom / osmo-iuh
0.1.0 < 1.8.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
cgit.osmocom.org: https://cgit.osmocom.org/osmo-iuh/commit/?id=f06967126f486bcb185ccf3d1a8f9bc02c4da1f6

Credits

Nikolas Null "n0k0" - Security Researcher at mnemonic