CVE-2026-117069: CVE-2026-117069: güvenlik açığı

Açıklama (NVD)

An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate() function truncates a 32-bit length value to 16 bits, bypassing length validation and causing an out-of-bounds heap read in DecodeImeisv(), which can crash the AMF process.

Özet bilgiler

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

%0,45 (yüzdelik 40)

CWE

CWE-197

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• gist.github.com
• github.com
• github.com
• CWE-197