CVE-2026-117068: Security vulnerability

Published Nov 2, 2026

Updated

An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a truncated SUCI in the 5GS Mobile Identity IE. Insufficient length validation in the DecodeSuci() function results in an out-of-bounds heap read, causing the AMF process to crash.

Event History

Nov 2, 2026

CVE Published

via NVD·06:18 PM

Data Sourced

via NVD·06:18 PM

Description

Frequently Asked Questions

Which systems should be prioritized for investigation?

OpenAirInterface CN5G AMF deployments running v2.2.1 should be prioritized, particularly AMFs that accept NAS Registration Requests from remote devices.

Does an attacker need valid credentials or prior authentication?

No. The issue is described as exploitable by an unauthenticated remote attacker.

What input is associated with an exploitation attempt?

The triggering input is a crafted NAS Registration Request containing a truncated SUCI in the 5GS Mobile Identity information element. Successful triggering can crash the AMF process and cause denial of service.

CVE-2026-117068: Security vulnerability

Event History

Frequently Asked Questions

Which systems should be prioritized for investigation?

Does an attacker need valid credentials or prior authentication?

What input is associated with an exploitation attempt?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for investigation?

Does an attacker need valid credentials or prior authentication?

What input is associated with an exploitation attempt?