What is GHSA-fpm9-38vr-4gp8?

GHSA-fpm9-38vr-4gp8 is a security advisory published by GitHub Security Advisories with unknown severity. In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack()...

Which CVE IDs does GHSA-fpm9-38vr-4gp8 cover?

GHSA-fpm9-38vr-4gp8 covers the following CVE IDs: CVE-2026-75895. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-fpm9-38vr-4gp8unknown

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack()...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-75895 →

📋 Description

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-75895
https://cgit.osmocom.org/libsmpp34/commit/?id=af0e2912057551dab97bbe26e6a41f18a75f3bbb
https://github.com/advisories/GHSA-fpm9-38vr-4gp8