Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-75895 →

DEBIAN-CVE-2026-75895

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libsmpp34

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-3+deb12u1"}]}]

Debian:13 libsmpp34

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 libsmpp34

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.6-1"}]}]

Références

advisory security-tracker.debian.org