How many CVEs does Osmocom have?

Osmocom has 4 published CVE records since 2026, including 4 in the last two years.

How many Osmocom CVEs are in CISA KEV?

None of Osmocom's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Osmocom products have the most CVEs?

The Osmocom products with the most published CVEs are libsmpp34, osmo-bsc, osmo-ggsn, osmo-iuh.

What are the most common weakness types in Osmocom CVEs?

Osmocom's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-617 (Reachable Assertion), CWE-787 (Out-of-bounds Write).

Are there public exploits for Osmocom vulnerabilities?

No Osmocom CVEs currently have a tracked public exploit in this dataset.

What is the average severity of Osmocom CVEs?

The average CVSS base score across Osmocom's scored CVEs is 7.3.

RadicalNotion.AI

Log in Create an account

4 CVEs

Osmocom Vulnerabilities

Name: Osmocom vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Osmocom.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.3

Avg CVSS

2026–2026

Overview

Osmocom has 4 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

Security scorecard

A quick read on Osmocom's vulnerability posture, as a share of its 4 published CVEs.

Average CVSS: 7.3
Critical / high: 75%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of Osmocom's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Osmocom's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Osmocom CVEs currently have a tracked public exploit.

Most affected products

The Osmocom products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Osmocom CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Osmocom CVE records.

redhat-cnalr4 CVEs

Latest Osmocom CVEs

The most recently disclosed vulnerabilities affecting Osmocom.

Out of bounds read at smpp34_unpack()
CWE-125
High · CVSS 7.5
EPSS 0.4%2026-09-18
Reachable assertion at ranap_handle_co_dt()
CWE-617
High · CVSS 7.5
EPSS 0.3%2026-09-18
Heap based buffer overflow at ipaccess_proxy_read_msg()
CWE-122
High · CVSS 7.5
EPSS 0.5%2026-09-18
Out of bounds write in PDP ctx GSN-Address decode
CWE-787
Medium · CVSS 6.5
EPSS 0.3%2026-09-18

Get an alert for each new Osmocom CVE, with AI-written analysis and remediation steps.

Monitor Osmocom CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about Osmocom vulnerabilities.

How many CVEs does Osmocom have?: Osmocom has 4 published CVE records since 2026, including 4 in the last two years.
How many Osmocom CVEs are in CISA KEV?: None of Osmocom's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Osmocom products have the most CVEs?: The Osmocom products with the most published CVEs are libsmpp34, osmo-bsc, osmo-ggsn, osmo-iuh.
What are the most common weakness types in Osmocom CVEs?: Osmocom's CVEs most often map to these CWE weakness types: CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-617 (Reachable Assertion), CWE-787 (Out-of-bounds Write).
Are there public exploits for Osmocom vulnerabilities?: No Osmocom CVEs currently have a tracked public exploit in this dataset.
What is the average severity of Osmocom CVEs?: The average CVSS base score across Osmocom's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Osmocom vulnerabilities

Get an alert for each new Osmocom CVE, with AI-written analysis and remediation steps.

Create an account See pricing