UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-104594

libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.c. This allows a remote attacker to obtain sensitive information.

Properties

Last source
NVD
Nvd fetched at
2026-10-26T23:20:21.485325+00:00
Cve id
CVE-2026-104594
First seen by Signal
2026-10-26T23:13:25+00:00
Retrieved at
2026-10-26T23:21:23+00:00
Published at
2026-10-26T19:16:28.700
Last modified
2026-10-26T19:16:28.700

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-104594 — Ninja Signal Threat Intelligence | Ninja Signal