CVE-2026-75893 describes a heap-based buffer overflow in the ipaccess_proxy_read_msg() function of Osmocom's osmo-bsc software. Versions from 1.0.1 up to but not including 1.14.1 are affected. The overflow occurs due to improper handling of IPA frame lengths, which can cause memory corruption on the heap. This vulnerability is classified under CWE-122. There is no information about active exploitation or a CVSS score, and no vendor advisory or patch information is provided.

The heap-based buffer overflow could allow an attacker to corrupt memory, potentially leading to application crashes or arbitrary code execution depending on the context of exploitation. However, no known exploits in the wild have been reported, and the exact impact depends on the environment and usage of the vulnerable function.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations are provided in the available data.