AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-75895

Red Hat libsmpp34: memory corruption

Red Hat

CVE-2026-75895 · Published Sep 18, 2026 · updated Sep 30, 2026

High7.5
Fix: upgrade to 1.14.5 or later
Red Hat advisory

In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory corruption.

Affected versions

PackageAffectedFixed in
libsmpp34
Product
>= 1.10.0, < 1.14.51.14.5
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-125

More Red Hat advisories

All Red Hat
Critical 9.3Sep 18Red Hat OpenShift console: server-side request forgeryCVE-2026-75885no fix yetMedium 6.5Sep 18Red Hat Netty: request smugglingCVE-2026-93574no fix yetMedium 6.5Sep 18Red Hat Netty: request smugglingCVE-2026-93562no fix yetMedium 6.1Sep 18A flaw was found in cockpit-filesCVE-2026-91202no fix yetMedium 6.0Sep 18Red Hat Enterprise Linux 9: race conditionCVE-2026-91203no fix yetMedium 6.0Sep 18Red Hat cockpit-files: race conditionCVE-2026-91205no fix yet