CVE-2026-117069

Name of the Vulnerable Software and Affected Versions OpenAirInterface (OAI) CN5G AMF version 2.2.1

Description An integer truncation issue exists in the NAS decoder. An unauthenticated remote attacker can trigger a denial of service by sending crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate() function truncates a 32-bit length value to 16 bits, which bypasses length validation and leads to an out-of-bounds heap read in the DecodeImeisv() function, resulting in a crash of the AMF process. This issue has been exploited in real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.