CVE-2026-7183
- Source
- https://cve.org/CVERecord?id=CVE-2026-7183
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7183.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-7183
- Published
- 2026-04-27T22:30:15.208Z
- Modified
- 2026-08-12T16:10:05.562971Z
- Severity
-
- 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception
- Details
-
A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7183.json", "cwe_ids": [ "CWE-248" ], "cna_assigner": "VulDB" }- References
-
- https://github.com/aligungr/UERANSIM/
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7183.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-7183
- https://vuldb.com/submit/800026
- https://vuldb.com/vuln/359784
- https://vuldb.com/vuln/359784/cti
- https://github.com/aligungr/UERANSIM/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b
- https://github.com/aligungr/UERANSIM/releases/tag/v3.2.8
Affected packages
Git / github.com/aligungr/ueransim
Affected ranges
- Type
- GIT
- Repo
- https://github.com/aligungr/ueransim
- Events
- Database specific
-
Show details
{ "source": [ "AFFECTED_FIELD", "REFERENCES" ], "extracted_events": [ { "introduced": "3.2.0" }, { "last_affected": "3.2.0" }, { "introduced": "3.2.1" }, { "last_affected": "3.2.1" }, { "introduced": "3.2.2" }, { "last_affected": "3.2.2" }, { "introduced": "3.2.3" }, { "last_affected": "3.2.3" }, { "introduced": "3.2.4" }, { "last_affected": "3.2.4" }, { "introduced": "3.2.5" }, { "last_affected": "3.2.5" }, { "introduced": "3.2.6" }, { "last_affected": "3.2.6" }, { "introduced": "3.2.7" }, { "last_affected": "3.2.7" } ] }
Affected versions
3.*
3.2.0
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
v3.*
v3.2.0
v3.2.1
v3.2.2
v3.2.4
v3.2.5
v3.2.6
v3.2.7
Database specific
vanir_signatures
[
{
"id": "CVE-2026-7183-08e3e58a",
"target": {
"function": "OctetView::readUtf8String",
"file": "src/utils/octet_view.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "213400414778305067153288535579471931816",
"length": 107.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-0aba0566",
"target": {
"function": "RlsControlTask::handleRlsMessage",
"file": "src/ue/rls/ctl_task.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "224700236214634297788307224167263579698",
"length": 1182.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-10551552",
"target": {
"function": "RlsControlTask::onAckSendTimerExpired",
"file": "src/gnb/rls/ctl_task.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "310123859276565063265854476606690737898",
"length": 319.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-1490da25",
"target": {
"function": "OctetView::readOctetString",
"file": "src/utils/octet_view.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "213400414778305067153288535579471931816",
"length": 107.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-2cf3324c",
"target": {
"function": "EstimateSimulatedDbm",
"file": "src/gnb/rls/udp_task.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "15093731457723751313668169783220706991",
"length": 313.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-660a171b",
"target": {
"file": "src/lib/rls/rls_pdu.cpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"79235936365240852079982855576289660295",
"140198735973313606362121046951420017205",
"224700713373093964551722494441998952255",
"118023054217324111915384558280999902020",
"325942210601837656509730871501381336454",
"240419304423806899675997501377390738040",
"191112489166218854171341555524512925677",
"220093791877723240396660879742666718838",
"324410571540401050205336135808413832116",
"113262389512530204076423825301629911356",
"18313568618332325061692732060084897994",
"109918647655350069731466816428524156467",
"157183664124168452523876220121925977488",
"314850722905602463766275378291188833432",
"91987504213540488690002465639997516500",
"208427006725169383074902509933295998131",
"270664594578220060518819584090855836366",
"77788459840616548011735355017285638544",
"163602294384781446647874281222470776209",
"1990213055587473415981439374012275565",
"65892395323555841970537320141856353691",
"284637484279112618093696704292926632883",
"337372920795918626865857174823442250796",
"177639657822956373731564255338763955105",
"190409980174980618679237221700244762006",
"226458727655050343942958311685113447001",
"19344359256499058144811559818455018023",
"104237712627302402268822083703859874748",
"325621301430128223397376462231056081975",
"196466737807140755493521674952154288731",
"179126324516298940436018372635224854878",
"47059367931693152746040061958614482535",
"267599136841685954422492613070667987934",
"56675896020897083102055681012924186",
"216546880925092424249146439088887071207"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-6d71e3c6",
"target": {
"file": "src/gnb/rls/ctl_task.cpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"16030308448590518025443067197247438585",
"48893439066848494971910020666823260178",
"244217975083863073499051139204202209190",
"138859719538050338327449958000172322361",
"324619727787332413418559184346061554596",
"198800146546795714025963642609775717552",
"107736215919416625438422005416263770896",
"82648276888345507310534584255126594896",
"102730250737890598756320348477206499196",
"244389297120672050939089166887241555783",
"340061342952064427384022384901713501245",
"173655672663014935286938920958383368465",
"299445868590689367406665612968457113741",
"108479837863522080206883593663137773023",
"273254302759981955999257591475940338663",
"314789851528814907794776973100630948007"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-76d060fc",
"target": {
"file": "src/utils/octet_view.hpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"11943972896512370113913278541419317687",
"17822580998645313304664072785429958533",
"50326962465577188895249386270664574608",
"201070168765929221614798993986183905099",
"120659965678737527592011785861072534784",
"272962940407910412741164080737177631602",
"233202077150161382544322372409351472922",
"102203167769879717060704363960772214576",
"216690742954524465585498614119296634800",
"277219804900890582694802400615110906980",
"59722921138563895791575883387918942518",
"298767814349499668219935581751730531737",
"301289106993981272499089775218848148105",
"316123034679763324748344516899869487280",
"102581843357932968841117691814900175987",
"40117300051484019530433970324933026827",
"95787749533909795404711561100523538626",
"159323072522241131758974811887802969820",
"204991871063136646994539875912653822669",
"107578360334649055002763795657436555734",
"152561546979093185749851645553297529924"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-856038cf",
"target": {
"function": "RlsControlTask::handleRlsMessage",
"file": "src/gnb/rls/ctl_task.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "169800356894441421478640708868717525880",
"length": 1162.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-a0b7a8fc",
"target": {
"file": "src/gnb/rls/udp_task.cpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"203480912584666465148657973030203238049",
"88057355537362311889762751452457589088",
"206463485011044299291113787412320638190",
"273959518705542640638750978659361321786",
"213602005629361604172717319259300750613",
"79875452432775662951849724587139162603",
"277518166893774384622371169256233388630",
"265782080906134448016047234823544639502",
"32476570723930389726278942202830857357",
"94229375616636926393706824650783558076",
"144980980894062772529920627172553659732",
"227903186159160211767221629646035217884",
"196963077926320139898657117159241516459",
"325492515272972134620733109253570817498",
"255294028602365737023950440729955869656"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-a5c22d7d",
"target": {
"function": "RlsControlTask::onAckSendTimerExpired",
"file": "src/ue/rls/ctl_task.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "15854369824406188250019353166501720362",
"length": 328.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-a7e9cd7a",
"target": {
"function": "OctetView::readUtf8String",
"file": "src/utils/octet_view.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "314057226845340981439494899983717047753",
"length": 149.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-b0a10505",
"target": {
"file": "src/ue/rls/ctl_task.cpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"16030308448590518025443067197247438585",
"36702026100177725320173635876622684099",
"314057323059547498400203411086075912655",
"215632657942898824717453753226633175578",
"324619727787332413418559184346061554596",
"90847777096322668756165770034094938277",
"192215567989660333521473452622947411136",
"252528765138089235641289647060019859916",
"102730250737890598756320348477206499196",
"244389297120672050939089166887241555783",
"340061342952064427384022384901713501245",
"173655672663014935286938920958383368465",
"299445868590689367406665612968457113741",
"108479837863522080206883593663137773023",
"142633624180759295586575000694372654350",
"223371919715484468843319068636792066420"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-b52fc8af",
"target": {
"file": "src/utils/constants.hpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"181032153297210434935841193619717592080",
"65821431046207658982844181426484852080",
"49021482406293720727188770659264489507",
"144615936650579969326895980797859823514",
"219108679267176690411444538617291248541",
"178397712461278722149827174105784226046",
"209442704562082242239073071957804353510"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-d70e3aed",
"target": {
"function": "DecodeRlsMessage",
"file": "src/lib/rls/rls_pdu.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "238778322218771673987233084817059919989",
"length": 1461.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-db317564",
"target": {
"file": "src/ue/rls/udp_task.cpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"84643495794678337054083147984825965612",
"10998537149600997649913199304588694799",
"213230885610302396272062499552937870673",
"315788467804791661254808998201957071903",
"310577400681555280916029557778449375986",
"9088651833633657411985382445931861707",
"160926481088591126009147753295562201455"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
},
{
"id": "CVE-2026-7183-e8ca7075",
"target": {
"function": "OctetView::readOctetString",
"file": "src/utils/octet_view.cpp"
},
"deprecated": false,
"digest": {
"function_hash": "266974560129657627412144284124765580816",
"length": 320.0
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Function"
},
{
"id": "CVE-2026-7183-ebc2c311",
"target": {
"file": "src/utils/octet_view.cpp"
},
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"109729705464949381530411002422039368904",
"195924246818225266777798127272462115616",
"210808701299975434850574839224638460144",
"122011572687750877071490401620036603811",
"155839349062587490848504718505347105019",
"285656222849500770368886885142939206274",
"161083468775099778704769940767563444575",
"278909379641934122019917582605091316785",
"61095499395879420794941992239694193237",
"153261498282126448126993965771023549073",
"172622887699853735266401080634147303393",
"47758353779843407023383845176064613430",
"47700301102205516985799596848872403503",
"220215317761147889984111854155442917801",
"92438599859521814168984305293389388132",
"125140384457956350129361971747603483607",
"215437893324021158708706417693272365560",
"10775994728538076414692332033864508968",
"98000494391005756520617626327458716040"
]
},
"signature_version": "v1",
"source": "https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b",
"signature_type": "Line"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7183.json"
vanir_signatures_modified
"2026-08-12T16:10:05Z"