CVE-2026-82587: Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amfnamfcommdecodeuemmcontextlist of the file src/amf/namf-handler.c of the component AMF. This manipulation of the argument ueContext.mmContextList[].allowedNssai causes memory corruption. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.8.0 is able to resolve this issue. Patch name: abf8a836564b966b5141110fc25ed413c4f17522. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS AMFto a version that resolves this vulnerability.Fixed in 2.8.0Patch abf8a836564b966b5141110fc25ed413c4f17522
Event History
Frequently Asked Questions
Which deployments are affected?
Open5GS AMF deployments using versions up to and including 2.7.7 are affected. The vulnerable code is in the AMF component's namf-handler.c file.
What access does an attacker need?
The issue can be initiated remotely and has low attack complexity. The supplied severity vector indicates that the attacker needs low privileges and no user interaction.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.
What should teams do to remediate the issue?
Upgrade the affected Open5GS AMF component to version 2.8.0. The identified patch is abf8a836564b966b5141110fc25ed413c4f17522.