CVE-2026-75894

osmo-iuh versions 0.1.0 through 1.8.0 contain a reachable assertion in the ranap_handle_co_dt() function that can be triggered by an arbitrarily sized NAS-PDU , resulting in a process crash and remote denial of service . The flaw is an insufficient bounds check on the incoming PDU size before the...

EUVD-2026-83274

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranaphandlecodt function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service...