CVE Feed

    Dashboard / CVE / CVE-2026-117067

    CVE-2026-117067

    An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.

    Published:Nov 2, 2026
    Last Modified:Nov 2, 2026
    EPS:Nov 2, 2026
    EPSS Score:
    CVSS Score:

    Affected Products

    Vendor
    Openairinterface
    Product
    Oai-cn5g-amf

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-117069 (CVSS 7.5) — An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an una…
    CVE-2026-117068 — An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unau…
    CVE-2026-30080 (CVSS 7.5) — OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has sup…
    CVE-2026-30075 (CVSS 7.5) — OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing…
    CVE-2026-30079 (CVSS 9.8) — In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registrat…
    CVE-2026-30078 (CVSS 7.5) — OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PD…
    CVE-2025-66786 (CVSS 7.5) — OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized …
    CVE-2025-65805 (CVSS 7.5) — OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High