Buffer overflow in Openairinterface Oai-Cn5g-Amf
CVE-2026-30075
OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and passed to the AUSF component for verification. AUSF crashes on receiving this oversize response. This can prohibit users from further registration and verification and can cause Denial of Services (DoS).
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.007 (49.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 50th percentile — 49.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.007 · change: +0.003
Affected products
- Openairinterface Oai-Cn5g-Amf — versions 2.2.0
Weakness classification (CWE)
References
- gitlab.eurecom.fr/oai/cn5g/oai-cn5g-ausf/-/issues (Exploit, Third Party Advisory, Issue Tracking)
- gitlab.eurecom.fr/oai/cn5g/oai-cn5g-ausf/-/issues/6 (Exploit, Third Party Advisory, Issue Tracking)
Frequently asked questions
- What is CVE-2026-30075?
- CVE-2026-30075 is a high-severity vulnerability in Openairinterface Oai-Cn5g-Amf, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.5/10. Published 2026-04-08.
- How severe is CVE-2026-30075?
- High severity. CVSS v3 base score is 7.5 out of 10.