Live › vulnerability › CVE-2026-117068
NVD says OpenAirInterface CN5G AMF v2.2.1 has an integer underflow in DecodeSuci(): a truncated SUCI in a Registration Request causes an out-of-bounds heap read and crashes the AMF, with no authentication. No vendor advisory or fixed version has been found.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 18:24 UTC. All times on this page are UTC.
Operators running the OpenAirInterface CN5G AMF version 2.2.1 that accepts NAS Registration Requests from the network. Deployments not running this AMF version are not affected by this entry. The sources do not say whether specific configurations change exposure.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| oai-cn5g-amf | vendor | v2.2.1 | – |
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation in the DecodeSuci() function results in an out-of-bounds heap read, causing the AMF process to crash.
This page as .md · .json · in your agent: get_signal("CVE-2026-117068")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.