CVE-2026-75894 PUBLISHED

Reachable assertion at ranap_handle_co_dt()

Assigner: redhat-cnalr
Reserved: 18.08.2026 Published: 18.09.2026 Updated: 18.09.2026

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

Product Status

Vendor Osmocom
Product osmo-iuh
Versions Default: unknown
  • affected from 0.1.0 to 1.8.0 (excl.)

Credits

  • Nikolas Null "n0k0" - Security Researcher at mnemonic finder

References

Problem Types

  • CWE-617 Reachable assertion CWE