CVE-2026-7183 | aligungr UERANSIM up to 3.2.7 Radio Link Simulation Layer src/lib/rls/rls_pdu.cpp rls::DecodeRlsMessage pduLength uncaught exception

A vulnerability marked as critical has been reported in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception.

This vulnerability is listed as CVE-2026-7183. The attack may be initiated remotely. In addition, an exploit is available.

It is suggested to upgrade the affected component.

This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.