What is GHSA-hwh6-m764-wjg7?

GHSA-hwh6-m764-wjg7 is a security advisory published by GitHub Security Advisories with High severity. osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc...

Which CVE IDs does GHSA-hwh6-m764-wjg7 cover?

GHSA-hwh6-m764-wjg7 covers the following CVE IDs: CVE-2026-104593. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hwh6-m764-wjg7?

GHSA-hwh6-m764-wjg7 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-hwh6-m764-wjg7HighCVSS 7.5

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

November 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-104593 →

📋 Description

osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-104593
https://github.com/osmocom/osmo-msc/commit/cd347bbe5392d8170ab87140b2bfdac683058b09
https://osmocom.org/issues/7058
https://github.com/advisories/GHSA-hwh6-m764-wjg7