What is GHSA-g4v5-w6q6-j5cq?

GHSA-g4v5-w6q6-j5cq is a security advisory published by GitHub Security Advisories with unknown severity. In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt()...

Which CVE IDs does GHSA-g4v5-w6q6-j5cq cover?

GHSA-g4v5-w6q6-j5cq covers the following CVE IDs: CVE-2026-75894. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-g4v5-w6q6-j5cqunknown

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt()...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-75894 →

📋 Description

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-75894
https://cgit.osmocom.org/osmo-iuh/commit/?id=f06967126f486bcb185ccf3d1a8f9bc02c4da1f6
https://github.com/advisories/GHSA-g4v5-w6q6-j5cq