CVE-2026-106808

Name of the Vulnerable Software and Affected Versions OpenAirInterface Core Network version 2.2.1

Description A stack-based buffer overflow exists in the OAI CN5G UDM 'Nudm UEAU Generate Authentication Data' endpoint. The issue occurs when the UDM passes attacker-controlled resynchronizationInfo.rand and auts values to the conv::hex str to uint8() function, which converts arbitrary-length hex strings into fixed-size stack buffers without validating the destination size. An unauthenticated attacker with access to the SBI interface and a valid SUPI can submit oversized values to overwrite adjacent stack memory and corrupt the stack canary, leading to the termination of the UDM process. This issue has been exploited in the wild.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.