{"id":"CVE-2026-75895","revision":"aacc780eb9d84e44b1bccb1ea55fa7d4","records":[{"revision":"aacc780eb9d84e44b1bccb1ea55fa7d4","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-75895","aliases":[],"title":"Out of bounds read at smpp34_unpack()","description":"In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the\u00A0at smpp34_unpack() function via attacker controlled\u00A0SMPP PDUs, leading to memory corruption.","state":0,"publishedAt":"2026-09-18T19:01:34.027+00:00","modifiedAt":"2026-09-30T17:07:29.973+00:00","affected":[{"ecosystem":"Vendor product","name":"libsmpp34","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Osmocom\",\n                    \"product\": \"libsmpp34\",\n                    \"repo\": \"https://cgit.osmocom.org/libsmpp34/\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"1.10.0\",\n                            \"lessThan\": \"1.14.5\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[],"references":["https://cgit.osmocom.org/libsmpp34/commit/?id=af0e2912057551dab97bbe26e6a41f18a75f3bbb"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-75895","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-75895","identifiers":["CVE-2026-75895"]},"retained":false,"historicalAffected":[]}],"coverage":[]}