CVE-2026-30075

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-30075

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-30075.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-30075

Published

2026-04-08T00:00:00Z

Modified

2026-08-12T03:51:10Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and passed to the AUSF component for verification. AUSF crashes on receiving this oversize response. This can prohibit users from further registration and verification and can cause Denial of Services (DoS).

Database specific

{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30075.json"
}

References

Affected packages

Git / gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf

Affected ranges

Type

GIT

Repo

https://gitlab.eurecom.fr/oai/cn5g/oai-cn5g-amf

Events

Introduced

5ad2873c649cb3da2702fb8c0748a77d79c51bf5

Last Affected

5ad2873c649cb3da2702fb8c0748a77d79c51bf5

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:openairinterface:oai-cn5g-amf:2.2.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.2.0"
        },
        {
            "last_affected":  "2.2.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

2.*

2.2.0

v2.*

v2.2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-30075.json"