35 matches found
CVE-2026-82587
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amfnamfcommdecodeuemmcontextlist of the file src/amf/namf-handler.c of the component AMF. This manipulation of the argument ueContext.mmContextList.allowedNssai causes memory corruption. The attack can ...
CVE-2026-82587 Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amfnamfcommdecodeuemmcontextlist of the file src/amf/namf-handler.c of the component AMF. This manipulation of the argument ueContext.mmContextList.allowedNssai causes memory corruption. The attack can ...
PT-2026-82522
An issue in the CreateUEContextProcedure function /v1/ue-contexts/supi of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PUT request...
CVE-2026-7535
A vulnerability was found in Open5GS up to 2.7.7. This affects the function amfnamfcommhandleregistrationstatusupdaterequest in the library /lib/app/ogs-init.c of the file /namf-comm/v1/ue-contexts/ueContextId/transfer-update. Performing a manipulation of the argument ueContextId results in denia...
CVE-2026-7535
A vulnerability was found in Open5GS up to 2.7.7. This affects the function amfnamfcommhandleregistrationstatusupdaterequest in the library /lib/app/ogs-init.c of the file /namf-comm/v1/ue-contexts/ueContextId/transfer-update. Performing a manipulation of the argument ueContextId results in denia...
EUVD-2026-26468
A vulnerability was found in Open5GS up to 2.7.7. This affects the function amfnamfcommhandleregistrationstatusupdaterequest in the library /lib/app/ogs-init.c of the file /namf-comm/v1/ue-contexts/ueContextId/transfer-update. Performing a manipulation of the argument ueContextId results in denia...
CVE-2026-7535 Open5GS transfer-update denial of service
A vulnerability was found in Open5GS up to 2.7.7. This affects the function amfnamfcommhandleregistrationstatusupdaterequest in the library /lib/app/ogs-init.c of the file /namf-comm/v1/ue-contexts/ueContextId/transfer-update. Performing a manipulation of the argument ueContextId results in denia...
free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer
Summary The HTTPUEContextTransfer handler in internal/sbi/apicommunication.go does not include a default case in the Content-Type switch statement. When a request arrives with an unsupported Content-Type, the deserialization step is silently skipped, err remains nil, and the processor is invoked...
GHSA-R99V-75P9-XQM5 free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer
Summary The HTTPUEContextTransfer handler in internal/sbi/apicommunication.go does not include a default case in the Content-Type switch statement. When a request arrives with an unsupported Content-Type, the deserialization step is silently skipped, err remains nil, and the processor is invoked...
EUVD-2026-24576
free5GC AMF: Missing default case in Content-Type switch in HTTPUEContextTransfer...
CVE-2026-41136
free5GC AMF provides Access & Mobility Management Function AMF for free5GC, an an open-source project for 5th generation 5G mobile core networks. Prior to version 1.4.3, the HTTPUEContextTransfer handler in internal/sbi/apicommunication.go does not include a default case in the Content-Type switc...
CVE-2026-41136 free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer
free5GC AMF provides Access & Mobility Management Function AMF for free5GC, an an open-source project for 5th generation 5G mobile core networks. Prior to version 1.4.3, the HTTPUEContextTransfer handler in internal/sbi/apicommunication.go does not include a default case in the Content-Type switc...
EUVD-2023-40942
Malicious code in bioql PyPI...
EUVD-2024-21874
Malicious code in bioql PyPI...
EUVD-2025-14852
Malicious code in bioql PyPI...
CVE-2024-24455
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...
CVE-2025-26265
A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response...
CVE-2025-26265
A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service DoS via a crafted UE Context Modification response...