CVE-2026-117068

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117068

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

EUVD-2026-115356

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117068: n/a: An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117068

The OpenAirInterface (OAI) CN5G AMF v2.2.1 is affected by an integer underflow vulnerability within its NAS decoder . Due to insufficient length validation in the DecodeSuci() function, an unauthenticated remote attacker can send a crafted NAS Registration Request containing a truncated SUCI in t...

PT-2026-135539

Name of the Vulnerable Software and Affected Versions OpenAirInterface OAI CN5G AMF version 2.2.1 Description An integer underflow in the NAS decoder allows an unauthenticated remote attacker to cause a denial of service. This occurs when the DecodeSuci function fails to perform sufficient length...