An out-of-bounds read vulnerability (CWE-125) exists in the smpp34_unpack() function of the Osmocom libsmpp34 library versions >=1.10.0 and <1.14.5. This flaw allows an attacker to craft SMPP PDUs that cause the function to read memory beyond the intended buffer boundaries, resulting in memory corruption. The vulnerability was identified in libsmpp35 versions 0.1.0 through 1.8.0, and the affected versions for libsmpp34 are explicitly stated as >=1.10.0 <1.14.5. No CVSS score or vendor patch information is provided.

The vulnerability can lead to memory corruption due to out-of-bounds reads triggered by malicious SMPP PDUs. This may cause application instability or potentially enable further exploitation depending on the context of use. There is no information about active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor vendor communications for updates and apply patches once available.