Vulnerability in Osmocom Osmo-Iuh

CVE-2026-75894

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

Affected products

Weakness classification (CWE)

References