CVE-2026-7183

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-7183

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7183.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-7183

Published

2026-04-27T22:30:15.208Z

Modified

2026-08-04T11:50:36.357923018Z

Severity

5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception

Details

A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Database specific

{
    "cwe_ids": [
        "CWE-248"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7183.json"
}

References

Affected packages

Git / github.com/aligungr/ueransim

Affected ranges

Type

GIT

Repo

https://github.com/aligungr/ueransim

Events

Introduced

0b4389c52b938425f17949e76eab73e856b3c573

Last affected

1d1e154f869260b5e98f6905827b1bd9b8663afc

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "3.2.0"
        },
        {
            "last_affected": "3.2.0"
        },
        {
            "introduced": "3.2.1"
        },
        {
            "last_affected": "3.2.1"
        },
        {
            "introduced": "3.2.2"
        },
        {
            "last_affected": "3.2.2"
        },
        {
            "introduced": "3.2.3"
        },
        {
            "last_affected": "3.2.3"
        },
        {
            "introduced": "3.2.4"
        },
        {
            "last_affected": "3.2.4"
        },
        {
            "introduced": "3.2.5"
        },
        {
            "last_affected": "3.2.5"
        },
        {
            "introduced": "3.2.6"
        },
        {
            "last_affected": "3.2.6"
        },
        {
            "introduced": "3.2.7"
        },
        {
            "last_affected": "3.2.7"
        }
    ]
}

Affected versions

3.*

3.2.0

3.2.1

3.2.2

3.2.3

3.2.4

3.2.5

3.2.6

3.2.7

v3.*

v3.2.0

v3.2.1

v3.2.2

v3.2.4

v3.2.5

v3.2.6

v3.2.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7183.json"