PT-2026-95594 · Osmocom+1 · Osmo-Ggsn
CVE-2026-75892
·
Published
2026-09-18
·
Updated
2026-09-18
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
osmo-ggsn version 1.14.0
Description
An out of bounds write issue exists in the
gtp decode pdp ctx() function via the PDP context GSN-Address sub-field, which can result in memory corruption. Memory corruption occurs when a program writes data outside the boundaries of the intended buffer, potentially leading to crashes or unauthorized code execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Osmo-Ggsn