CVE-2026-30077: Input Validation
Published Mar 30, 2026
·Updated
OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88.
Affected Software
2 affected components
openairinterface OpenAirInterface AMF=2.2.0
openairinterface OpenAirInterface=2.2.0
Event History
Mar 30, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-30077?
CVE-2026-30077 is classified as a high severity vulnerability due to the potential for application crashes.
2
How do I fix CVE-2026-30077?
To mitigate CVE-2026-30077, users should update the OpenAirInterface AMF to a version that addresses the decoding issue.
3
Which version of OpenAirInterface is affected by CVE-2026-30077?
OpenAirInterface AMF version 2.2.0 is affected by CVE-2026-30077.
4
What conditions lead to a crash in CVE-2026-30077?
CVE-2026-30077 consistently crashes the application when specific input messages fail to decode.
5
Is CVE-2026-30077 an exploited vulnerability?
As of now, there are no known exploits or active attacks targeting CVE-2026-30077.