GHSA-6p7m-c3mw-4gmw

Suggest an improvement
Source
https://github.com/advisories/GHSA-6p7m-c3mw-4gmw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-6p7m-c3mw-4gmw/GHSA-6p7m-c3mw-4gmw.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-6p7m-c3mw-4gmw
Aliases
Published
2026-05-26T13:30:24Z
Modified
2026-07-07T16:11:28Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
omec-project amf Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer
Details

A vulnerability has been found in omec-project amf up to 2.1.1. This affects an unknown part of the component NGSetupRequest Handler. Such manipulation leads to memory corruption. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. It is best practice to apply a patch to resolve this issue.

Database specific 
{
    "cwe_ids":  [
        "CWE-119"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-06-30T14:56:02Z",
    "nvd_published_at":  "2026-05-23T12:17:02Z",
    "severity":  "LOW"
}
References

Affected packages

Go / github.com/omec-project/amf

Package

Name
github.com/omec-project/amf
View open source insights on deps.dev
Purl
pkg:golang/github.com/omec-project/amf

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.1-0.20260421213846-34bc6724acc9

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-6p7m-c3mw-4gmw/GHSA-6p7m-c3mw-4gmw.json"