CVE-2026-75893

A heap-based buffer overflow vulnerability exists in the ipaccess_proxy_read_msg() function of osmo-bsc versions 1.0.1 through 1.14.1, which could be exploited through malicious IPA frame lengths. This flaw may lead to arbitrary code execution or crashes, posing a significant risk to systems running affected versions. Network operators and administrators using osmo-bsc should prioritize patching to mitigate potential exploitation.