The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoVulnerability
CVE-2026-117068: An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-117068
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
An integer underflow in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 lets an unauthenticated remote attacker crash the AMF process. Crafted NAS Registration Requests with a truncated SUCI in the 5GS Mobile Identity IE trigger an out-of-bounds heap read in DecodeSuci(), because length validation is insufficient. The result is a denial of service.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.