Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation in the DecodeSuci() function results in an out-of-bounds heap read, causing the AMF process to crash.
Засегнати продукти
- n/a n/a: n/a
История
- 2 ноември 2026 Публикувано
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-117068
- https://nvd.nist.gov/vuln/detail/CVE-2026-117068
- https://github.com/openairinterface/oai-cn5g-ausf/issues/7
- https://gist.github.com/hackeryounow/aa1df06bb785bda0952a30939dcb9a76
- https://github.com/openairinterface/oai-cn5g-amf/pull/26/commits/c5178c644f87c5ef8828353192fea464d977e17b