Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-30078 1 Openairinterface 1 Oai-cn5g-amf 2026-04-06 7.5 High
OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires InitiatingMessage but sent with successfulOutcome.
CVE-2025-65805 1 Openairinterface 2 Cn5g Amf, Oai-cn5g-amf 2026-01-29 7.5 High
OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by accessing port N1 and sending an imsi string longer than 1000 to AMF.
CVE-2025-66786 1 Openairinterface 2 Cn5g Amf, Oai-cn5g-amf 2026-01-29 7.5 High
OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to AMF's SBI interface to launch a denial-of-service attack.