77 matches found
CVE-2026-117069
An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...
CVE-2026-117067
An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...
CVE-2026-117068
An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...
CVE-2026-106808
OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...
CVE-2026-106808
OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...
CVE-2026-117068
An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...
CVE-2026-117068: n/a: An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…
An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...
EUVD-2026-115356
An integer underflow vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation ...
CVE-2026-106808
OpenAirInterface Core Network v2.2.1 is affected by a stack-based buffer overflow in the OAI CN5G UDM Nudm_UEAU Generate Authentication Data endpoint. The vulnerability occurs because the UDM passes attacker-controlled resynchronizationInfo.rand and auts values to the conv::hex_str_to_uint8() fun...
CVE-2026-117067
The OpenAirInterface (OAI) CN5G AMF v2.2.1 software is susceptible to an out-of-bounds memory access vulnerability within the N2 SCTP interface . The root cause is improper file descriptor bounds checking during the FD_SET() operation. An unauthenticated remote attacker can exploit this by repeat...
CVE-2026-117069: n/a: An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…
An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...
PT-2026-135638
Name of the Vulnerable Software and Affected Versions OpenAirInterface OAI CN5G AMF version 2.2.1 Description An integer truncation issue exists in the NAS decoder. An unauthenticated remote attacker can trigger a denial of service by sending crafted NAS Registration Requests containing a malform...
CVE-2026-106808: n/a: OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU…
OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...
PT-2026-135544
Name of the Vulnerable Software and Affected Versions OpenAirInterface Core Network version 2.2.1 Description A stack-based buffer overflow exists in the OAI CN5G UDM 'Nudm UEAU Generate Authentication Data' endpoint. The issue occurs when the UDM passes attacker-controlled...
EUVD-2026-115355
An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...
CVE-2026-117067
An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bound...
CVE-2026-117068
The OpenAirInterface (OAI) CN5G AMF v2.2.1 is affected by an integer underflow vulnerability within its NAS decoder . Due to insufficient length validation in the DecodeSuci() function, an unauthenticated remote attacker can send a crafted NAS Registration Request containing a truncated SUCI in t...
EUVD-2026-115382
An integer truncation vulnerability in the NAS decoder of OpenAirInterface OAI CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service DoS via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate...
CVE-2026-106808
OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...
EUVD-2026-115351
OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication Data endpoint. The UDM passes attacker-controlled resynchronizationInfo.rand and auts values to conv::hexstrtouint8, which converts arbitrary-length hex string...