CVE-2026-101035: aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception
A flaw has been found in aligungr UERANSIM up to 3.3.0. This affects the function DecodePlainMmMessage in the library src/lib/nas/encode.cpp of the component nr-gnb. Executing a manipulation can lead to uncaught exception. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac. It is best practice to apply a patch to resolve this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
aligungr UERANSIMto a version that resolves this vulnerability.Patch 1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects aligungr UERANSIM versions up to and including 3.3.0, specifically the nr-gnb component.
Does exploitation require authentication or user interaction?
No. The supplied severity vector indicates network access, low attack complexity, no privileges required, and no user interaction; the issue can be launched remotely.
What should be done to remediate the issue?
Apply the patch identified as commit 1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac. Exploit code has been published, so affected deployments should be prioritized for remediation.