136 matches found
CVE-2026-93308
CVE-2026-93308 affects the VES Collector component of O-RAN-SC SMO OAM (2025-06-10). The vulnerability allows a remote, low-privilege attacker to trigger an allocation of resources issue, resulting in a low availability impact (CVSS 3.1 base score: 4.3 – MEDIUM ). The specific functionality affec...
CVE-2026-93308 O-RAN-SC SMO OAM VES Collector allocation of resources
A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functionality of the component VES Collector. Performing a manipulation results in allocation of resources. The attack may be initiated remotely. The exploit has been made public and could be...
CVE-2026-93307
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2026-93307 O-RAN-SC SMO OAM VES Collector memory allocation
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2026-93307 O-RAN-SC SMO OAM VES Collector memory allocation
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2026-93307
CVE-2026-93307 affects the VES Collector component in O-RAN-SC SMO OAM (version 2025-06-10). The vulnerability stems from manipulation of the additionalFields.padding argument, which leads to uncontrolled memory allocation . An attacker with low privileges can exploit this remotely , resulting in...
PT-2026-95186
Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description An issue exists within an unknown functionality of the VES Collector component. A remote attacker can perform a manipulation that leads to the allocation of resources. Recommendations At the...
PT-2026-95185
Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description An issue exists within an unknown functionality of the VES Collector component. A remote attacker can perform a manipulation that results in the allocation of resources. Recommendations At the...
PT-2026-95147
Name of the Vulnerable Software and Affected Versions O-RAN-SC SMO OAM version 2025-06-10 Description A remote issue exists within the VES Collector component where manipulation of the additionalFields.padding argument leads to uncontrolled memory allocation. Recommendations At the moment, there ...
CVE-2026-93307: Memory Allocation with Excessive Size Value
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
A Queryable Graph-Based Security Analysis Framework for O-RAN
The Open Radio Access Network O-RAN replaces vendor-locked RANs with a modular and interoperable architecture that fosters competition and accelerates innovation. With this openness comes increased complexity and a larger attack surface, making security a critical concern. Today, assessing O-RAN...
Quantum-Based Solutions for Security Enhancement in Open Radio Access Networks
Open Radio Access Networks O-RAN introduce unprecedented flexibility, interoperability, and intelligence into next-generation wireless systems, but their disaggregated and software-defined architecture also expands the attack surface and creates new security vulnerabilities. Conventional...
The Energetic Cost of Mitigating AI Attacks in Cellular Networks
The integration of Artificial Intelligence AI, generally as Machine Learning ML algorithms, in all levels and aspects of cellular networks demonstrates the success of data-driven algorithms; for example, the Radio Intelligence Controller RIC of the O-RAN paradigm bestows the network with optimise...
C-RE-ACT: Causal RE-ACTing Agent for O-RAN Forensic Triage
The shift to O-RAN architectures marks a turning point in cellular security, where increased openness and modularity directly translate into a broader attack surface. Among the security threats cataloged by the O-RAN Alliance Working Group 11, performance-degradation attacks constitute the larges...
CVE-2023-40998
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component...
CVE-2024-34473
An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34043
O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message...
