CVE-2026-90707

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0

Description A remote flaw exists in the Old AMF Discovery Fallback component within the amf nnrf try old amf discovery fallback() function of the src/amf/nnrf-handler.c file. Manipulating the discovery option argument can lead to a use after free condition, which occurs when a program continues to use a pointer after it has been freed, potentially causing crashes or arbitrary code execution.

Recommendations Apply patch ddd683a35f8aaac2b7b9884a24cd53bddfc65238 to resolve the issue.