PT-2026-99739 · Aligungr · Ueransim
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
aligungr UERANSIM versions prior to 3.3.1
Description
A remote memory corruption issue exists in the
nr-gnb component within the ULInformationTransfer() function located in the src/gnb/rrc/handler.cpp file. This occurs when the dedicatedNASMessage argument is manipulated.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary mitigation, restrict access to the
ULInformationTransfer() function to minimize the risk of exploitation.Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ueransim