CVE-2026-75893: Osmocom Osmo-Bsc

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  function via IPA frame lengths.

Affected products

• Osmocom Osmo-Bsc: from 1.0.1, before 1.14.1 (fixed in 1.14.1)

Published 2026-09-18. Last modified 2026-09-21.