{"id":"CVE-2026-7183","summary":"aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception","details":"A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.","modified":"2026-08-07T15:14:14.704354Z","published":"2026-04-27T22:30:15.208Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-248"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7183.json"},"references":[{"type":"WEB","url":"https://github.com/aligungr/UERANSIM/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7183.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7183"},{"type":"ADVISORY","url":"https://vuldb.com/submit/800026"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/359784"},{"type":"REPORT","url":"https://vuldb.com/vuln/359784/cti"},{"type":"FIX","url":"https://github.com/aligungr/UERANSIM/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"},{"type":"FIX","url":"https://github.com/aligungr/UERANSIM/releases/tag/v3.2.8"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/aligungr/ueransim","events":[{"introduced":"0b4389c52b938425f17949e76eab73e856b3c573"},{"fixed":"ca1a66fffe282767bb08618af9f848e3b68ea47b"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"3.2.0"},{"last_affected":"3.2.0"},{"introduced":"3.2.1"},{"last_affected":"3.2.1"},{"introduced":"3.2.2"},{"last_affected":"3.2.2"},{"introduced":"3.2.3"},{"last_affected":"3.2.3"},{"introduced":"3.2.4"},{"last_affected":"3.2.4"},{"introduced":"3.2.5"},{"last_affected":"3.2.5"},{"introduced":"3.2.6"},{"last_affected":"3.2.6"},{"introduced":"3.2.7"},{"last_affected":"3.2.7"}]}}],"versions":["3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.2.6","3.2.7","v3.2.7","v3.2.6","v3.2.5","v3.2.4","v3.2.2","v3.2.1","v3.2.0"],"database_specific":{"vanir_signatures_modified":"2026-08-07T15:14:14Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"213400414778305067153288535579471931816","length":107},"id":"CVE-2026-7183-08e3e58a","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/utils/octet_view.cpp","function":"OctetView::readUtf8String"}},{"source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/ue/rls/ctl_task.cpp","function":"RlsControlTask::handleRlsMessage"},"deprecated":false,"digest":{"function_hash":"224700236214634297788307224167263579698","length":1182},"id":"CVE-2026-7183-0aba0566","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"310123859276565063265854476606690737898","length":319},"id":"CVE-2026-7183-10551552","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/gnb/rls/ctl_task.cpp","function":"RlsControlTask::onAckSendTimerExpired"},"deprecated":false},{"id":"CVE-2026-7183-1490da25","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/utils/octet_view.cpp","function":"OctetView::readOctetString"},"deprecated":false,"digest":{"function_hash":"213400414778305067153288535579471931816","length":107}},{"deprecated":false,"digest":{"function_hash":"15093731457723751313668169783220706991","length":313},"id":"CVE-2026-7183-2cf3324c","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"function":"EstimateSimulatedDbm","file":"src/gnb/rls/udp_task.cpp"}},{"deprecated":false,"digest":{"line_hashes":["79235936365240852079982855576289660295","140198735973313606362121046951420017205","224700713373093964551722494441998952255","118023054217324111915384558280999902020","325942210601837656509730871501381336454","240419304423806899675997501377390738040","191112489166218854171341555524512925677","220093791877723240396660879742666718838","324410571540401050205336135808413832116","113262389512530204076423825301629911356","18313568618332325061692732060084897994","109918647655350069731466816428524156467","157183664124168452523876220121925977488","314850722905602463766275378291188833432","91987504213540488690002465639997516500","208427006725169383074902509933295998131","270664594578220060518819584090855836366","77788459840616548011735355017285638544","163602294384781446647874281222470776209","1990213055587473415981439374012275565","65892395323555841970537320141856353691","284637484279112618093696704292926632883","337372920795918626865857174823442250796","177639657822956373731564255338763955105","190409980174980618679237221700244762006","226458727655050343942958311685113447001","19344359256499058144811559818455018023","104237712627302402268822083703859874748","325621301430128223397376462231056081975","196466737807140755493521674952154288731","179126324516298940436018372635224854878","47059367931693152746040061958614482535","267599136841685954422492613070667987934","56675896020897083102055681012924186","216546880925092424249146439088887071207"],"threshold":0.9},"id":"CVE-2026-7183-660a171b","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/lib/rls/rls_pdu.cpp"}},{"target":{"file":"src/gnb/rls/ctl_task.cpp"},"deprecated":false,"digest":{"line_hashes":["16030308448590518025443067197247438585","48893439066848494971910020666823260178","244217975083863073499051139204202209190","138859719538050338327449958000172322361","324619727787332413418559184346061554596","198800146546795714025963642609775717552","107736215919416625438422005416263770896","82648276888345507310534584255126594896","102730250737890598756320348477206499196","244389297120672050939089166887241555783","340061342952064427384022384901713501245","173655672663014935286938920958383368465","299445868590689367406665612968457113741","108479837863522080206883593663137773023","273254302759981955999257591475940338663","314789851528814907794776973100630948007"],"threshold":0.9},"id":"CVE-2026-7183-6d71e3c6","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"},{"target":{"file":"src/utils/octet_view.hpp"},"deprecated":false,"digest":{"line_hashes":["11943972896512370113913278541419317687","17822580998645313304664072785429958533","50326962465577188895249386270664574608","201070168765929221614798993986183905099","120659965678737527592011785861072534784","272962940407910412741164080737177631602","233202077150161382544322372409351472922","102203167769879717060704363960772214576","216690742954524465585498614119296634800","277219804900890582694802400615110906980","59722921138563895791575883387918942518","298767814349499668219935581751730531737","301289106993981272499089775218848148105","316123034679763324748344516899869487280","102581843357932968841117691814900175987","40117300051484019530433970324933026827","95787749533909795404711561100523538626","159323072522241131758974811887802969820","204991871063136646994539875912653822669","107578360334649055002763795657436555734","152561546979093185749851645553297529924"],"threshold":0.9},"id":"CVE-2026-7183-76d060fc","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"},{"deprecated":false,"digest":{"function_hash":"169800356894441421478640708868717525880","length":1162},"id":"CVE-2026-7183-856038cf","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/gnb/rls/ctl_task.cpp","function":"RlsControlTask::handleRlsMessage"}},{"deprecated":false,"digest":{"line_hashes":["203480912584666465148657973030203238049","88057355537362311889762751452457589088","206463485011044299291113787412320638190","273959518705542640638750978659361321786","213602005629361604172717319259300750613","79875452432775662951849724587139162603","277518166893774384622371169256233388630","265782080906134448016047234823544639502","32476570723930389726278942202830857357","94229375616636926393706824650783558076","144980980894062772529920627172553659732","227903186159160211767221629646035217884","196963077926320139898657117159241516459","325492515272972134620733109253570817498","255294028602365737023950440729955869656"],"threshold":0.9},"id":"CVE-2026-7183-a0b7a8fc","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/gnb/rls/udp_task.cpp"}},{"target":{"function":"RlsControlTask::onAckSendTimerExpired","file":"src/ue/rls/ctl_task.cpp"},"deprecated":false,"digest":{"function_hash":"15854369824406188250019353166501720362","length":328},"id":"CVE-2026-7183-a5c22d7d","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"},{"target":{"file":"src/utils/octet_view.cpp","function":"OctetView::readUtf8String"},"deprecated":false,"digest":{"function_hash":"314057226845340981439494899983717047753","length":149},"id":"CVE-2026-7183-a7e9cd7a","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/ue/rls/ctl_task.cpp"},"deprecated":false,"digest":{"line_hashes":["16030308448590518025443067197247438585","36702026100177725320173635876622684099","314057323059547498400203411086075912655","215632657942898824717453753226633175578","324619727787332413418559184346061554596","90847777096322668756165770034094938277","192215567989660333521473452622947411136","252528765138089235641289647060019859916","102730250737890598756320348477206499196","244389297120672050939089166887241555783","340061342952064427384022384901713501245","173655672663014935286938920958383368465","299445868590689367406665612968457113741","108479837863522080206883593663137773023","142633624180759295586575000694372654350","223371919715484468843319068636792066420"],"threshold":0.9},"id":"CVE-2026-7183-b0a10505"},{"deprecated":false,"digest":{"line_hashes":["181032153297210434935841193619717592080","65821431046207658982844181426484852080","49021482406293720727188770659264489507","144615936650579969326895980797859823514","219108679267176690411444538617291248541","178397712461278722149827174105784226046","209442704562082242239073071957804353510"],"threshold":0.9},"id":"CVE-2026-7183-b52fc8af","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/utils/constants.hpp"}},{"signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/lib/rls/rls_pdu.cpp","function":"DecodeRlsMessage"},"deprecated":false,"digest":{"function_hash":"238778322218771673987233084817059919989","length":1461},"id":"CVE-2026-7183-d70e3aed","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["84643495794678337054083147984825965612","10998537149600997649913199304588694799","213230885610302396272062499552937870673","315788467804791661254808998201957071903","310577400681555280916029557778449375986","9088651833633657411985382445931861707","160926481088591126009147753295562201455"],"threshold":0.9},"id":"CVE-2026-7183-db317564","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/ue/rls/udp_task.cpp"}},{"target":{"file":"src/utils/octet_view.cpp","function":"OctetView::readOctetString"},"deprecated":false,"digest":{"length":320,"function_hash":"266974560129657627412144284124765580816"},"id":"CVE-2026-7183-e8ca7075","signature_type":"Function","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b"},{"digest":{"line_hashes":["109729705464949381530411002422039368904","195924246818225266777798127272462115616","210808701299975434850574839224638460144","122011572687750877071490401620036603811","155839349062587490848504718505347105019","285656222849500770368886885142939206274","161083468775099778704769940767563444575","278909379641934122019917582605091316785","61095499395879420794941992239694193237","153261498282126448126993965771023549073","172622887699853735266401080634147303393","47758353779843407023383845176064613430","47700301102205516985799596848872403503","220215317761147889984111854155442917801","92438599859521814168984305293389388132","125140384457956350129361971747603483607","215437893324021158708706417693272365560","10775994728538076414692332033864508968","98000494391005756520617626327458716040"],"threshold":0.9},"id":"CVE-2026-7183-ebc2c311","signature_type":"Line","signature_version":"v1","source":"https://github.com/aligungr/ueransim/commit/ca1a66fffe282767bb08618af9f848e3b68ea47b","target":{"file":"src/utils/octet_view.cpp"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7183.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}]}