CVE-2026-100892 aligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption

A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely...

drachtio-server memory mis-reference vulnerability

drachtio-server is a SIP server built on the sofia SIP stack by drachtio open source. drachtio drachtio-server version 0.8.18 is vulnerable to a memory misquoting vulnerability that stems from the request-handler.cpp component receiving requests when the event The cb instruction responsible for...

CVE-2022-45474

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

Cross site request forgery (csrf)

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

CVE-2022-45474: Use After Free

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

CVE-2022-45474

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

CVE-2022-45474

CVE-2022-45474 affects drachtio-server 0.8.18. The vulnerability is a use-after-free in the file request-handler.cpp: event_cb that can trigger on any request, leading to memory corruption and potential arbitrary code execution. CVSSv3.1 metrics indicate a CRITICAL score (9.8) with NETWORK access...