Openairinterface Oai-Cn5g-Amf
6 CVEs affecting Openairinterface Oai-Cn5g-Amf. Latest disclosed: 2026-04-08. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-30079 | Critical | 9.8 | 2026-04-07 | In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be b… |
CVE-2026-30080 | High | 7.5 | 2026-04-08 | OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE send… |
CVE-2026-30075 | High | 7.5 | 2026-04-08 | OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU wit… |
CVE-2026-30078 | High | 7.5 | 2026-04-06 | OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specificatio… |
CVE-2025-66786 | High | 7.5 | 2026-01-07 | OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to… |
CVE-2025-65805 | High | 7.5 | 2026-01-07 | OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service… |