CVE-2026-117069: n/a: An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…

An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...

CVE-2026-117068: n/a: An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

PT-2026-135638

Name of the Vulnerable Software and Affected Versions OpenAirInterface OAI CN5G AMF version 2.2.1 Description An integer truncation issue exists in the NAS decoder. An unauthenticated remote attacker can trigger a denial of service by sending crafted NAS Registration Requests containing a malform...