CVE-2026-30075High· 7.5▾ TwilightOpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.7%
OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and passed to the AUSF component for verification. AUSF crashes on receiving this oversize response. This can prohibit users from further registration and verification and can cause Denial of Services (DoS).
oai-cn5g-amf = 2.2.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-30080High· 7.5OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection
CVE-2025-14141High· 8.8A flaw has been found in UTT 进取 520W 1.7.7-180627
CVE-2025-14140Medium· 6.5A vulnerability was detected in UTT 进取 520W 1.7.7-180627
CVE-2025-14139Medium· 5.7A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627
CVE-2025-14191High· 8.8A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114
CVE-2021-42553Medium· 6.8A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS