737878 matches found
EUVD-2026-67111
An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service DoS when parsing crafted SUCI data during UE registration...
CVE-2026-30071
CVE-2026-30071 affects the RechargePut function in free5gc v4.0.1 , a 5G core network implementation. A remote attacker can send a crafted input to trigger a Denial of Service (DoS) , with no authentication required and low attack complexity. The CVSS 3.1 score is 7.5 (HIGH) , reflecting high ava...
CVE-2026-30067
A vulnerability in the complexQueryFilterSubprocess function within the NRF Discovery service of free5gc v4.0.1 allows an unauthenticated remote attacker to trigger a Denial of Service (DoS) via a crafted input. The CVSS 3.1 score is 7.5 (High) , with the attack vector being network-based, low co...
EUVD-2026-67115
An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30060
free5gc v4.0.1 is affected by a Denial of Service vulnerability triggered when parsing crafted SUCI (Subscription Concealed Identifier) data during UE registration. The issue is tracked in the project's issue tracker (GitHub issue #769 ). The CVSS 3.1 score is 7.5 (HIGH) with a network attack vec...
CVE-2026-30064
free5gc v4.0.1 is affected by an improper input validation flaw in the buildFilter function (file: processor/processor.go). An unauthenticated remote attacker can supply a crafted input to trigger a Denial of Service (DoS) . The vulnerability is scored CVSS 3.1: 7.5 (High) with a vector of AV:N/A...
EUVD-2026-67117
A NULL pointer dereference in the UDMC registration handler component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted payload...
EUVD-2026-67103
A reachable assertion vulnerability in the NUDM-UECM interface of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-30056
A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 (an open-source 5G Core implementation) allows a remote attacker to trigger a Denial of Service by supplying crafted NGAP messages during the initialization of a new RAN connection. The vulnerability is rated CVSS 7...
CVE-2026-30050
free5gc v4.1.0 , an open-source 5G Core implementation, is affected by a Denial of Service vulnerability in the ModifyAMFEventSubscriptionProcedure function located in processor/event_exposure.go. An unauthenticated attacker can trigger the DoS by supplying a crafted PATCH request over the networ...
PT-2026-82772
In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...
EUVD-2026-67110
An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...
CVE-2026-30071
An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2026-67104
A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...
CVE-2026-30059
An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...
CVE-2026-30064
Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-30050
An issue in the ModifyAMFEventSubscriptionProcedure function processor/eventexposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...
CVE-2026-38343
CVE-2026-38343 is an integer overflow in the libavfilter/vf_scale.c component of FFmpeg (affected version N-122528-gdd2976b9e1). By supplying a crafted video file , an attacker can trigger a Denial of Service , causing the application to become unresponsive or crash (CVSS 3.1: 6.5 MEDIUM , with u...
CVE-2026-38350
An integer overflow in the target_sws_fuzzer() function (located in libswscale/output.c ) of FFmpeg (commit N-122528-gdd2976b9e1) allows a remote attacker to trigger a Denial of Service (DoS) by supplying a specially crafted input. The Red Hat advisory notes the application can become unresponsiv...