CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

CVE-2026-30062

CVE-2026-30062 affects the NGAP handler in free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated remote attacker can send a crafted NAS PDU to trigger a Denial of Service , with the CVSS 3.1 score of 7.5 (HIGH) reflecting a network attack vector requiring no privileges or use...

EUVD-2026-67112

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

CVE-2026-71676

CVE-2026-71676 is a buffer overflow in Open5GS v.2.7.0 , specifically in the NAS 5GS decoder chain . A remote, unauthenticated attacker can trigger a denial of service by mutating the message type byte of a NAS PDU. The CVSS 3.1 score is 7.5 (HIGH) with a network vector and no privileges required...

CVE-2026-71676

Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...

CVE-2026-30075

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response For example 100 byte. The response is decoded by AMF and passed to the AUSF component for verification. AUSF crashes o...

EUVD-2024-21875

Malicious code in bioql PyPI...

CVE-2024-24456

An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentially due to a buffer overflow...

Open5GS Denial of Service Vulnerability (CNVD-2025-03154)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited to cause a denial of service by an attacker who sends an "Initial UE Message" that lacks the required...