CVE-2026-117069

An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...

CVE-2026-117068

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117069: n/a: An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…

An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...

PT-2026-135638

Name of the Vulnerable Software and Affected Versions OpenAirInterface OAI CN5G AMF version 2.2.1 Description An integer truncation issue exists in the NAS decoder. An unauthenticated remote attacker can trigger a denial of service by sending crafted NAS Registration Requests containing a malform...

EUVD-2026-115356

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117068: n/a: An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117068

An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...

CVE-2026-117068

The OpenAirInterface (OAI) CN5G AMF version 2.2.1 is vulnerable to an integer underflow in the NAS decoder. The root cause is insufficient length validation within the DecodeSuci() function, which allows an unauthenticated remote attacker to trigger an out-of-bounds heap read by sending a crafted...

EUVD-2026-115382

An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...

PT-2026-135539

Name of the Vulnerable Software and Affected Versions OpenAirInterface OAI CN5G AMF version 2.2.1 Description An integer underflow in the NAS decoder allows an unauthenticated remote attacker to cause a denial of service. This occurs when the DecodeSuci function fails to perform sufficient length...

CVE-2026-117069

An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...

CVE-2026-117069

An integer truncation vulnerability exists in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 . The Type6NasIe::Validate() function incorrectly truncates a 32-bit length value to 16 bits, which allows an unauthenticated remote attacker to bypass length validation. By sending a crafted N...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

PT-2026-82526

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

EUVD-2026-67110

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

The free5gc v4.0.1 software is affected by a vulnerability in its NAS decoder component . An attacker can trigger a Denial of Service (DoS) by sending a crafted Registration Request message . While specific remediation steps are not provided in the documents, the vulnerability is characterized by...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059: Allocation of Resources Without Limits or Throttling

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...