CVE-2026-56758
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
49/100
Published: 2026-07-30
Modified: 2026-10-23
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
None
VI:
None
VA:
High
Description
The ACSE layer contains a flaw in the processing of AARQ PDUs during MMS connection establishment. When parsing certain fields within the calling AP title, an attacker controlled length value of zero or one may cause the parser to read past the end of a heap buffer.