CVE-2026-117069
Deferred Deferred - Pending Action

Integer Truncation in OpenAirInterface CN5G AMF NAS Decoder Causes DoS

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: MITRE

Description
An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via crafted NAS Registration Requests containing a malformed IMEISV in the 5GS Mobile Identity IE. The Type6NasIe::Validate() function truncates a 32-bit length value to 16 bits, bypassing length validation and causing an out-of-bounds heap read in DecodeImeisv(), which can crash the AMF process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-117069

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an integer truncation vulnerability in OpenAirInterface's CN5G AMF v2.2.1 NAS decoder. An unauthenticated remote attacker can exploit it by sending crafted NAS Registration Requests with a malformed IMEISV in the 5GS Mobile Identity IE. The vulnerability occurs when the Type6NasIe::Validate() function truncates a 32-bit length value to 16 bits, bypassing proper length validation.

Impact Analysis

This vulnerability can cause a denial of service (DoS) by crashing the AMF process. If exploited, it may disrupt network services relying on the OpenAirInterface CN5G AMF component, leading to service unavailability for legitimate users.

Mitigation Strategies

Update OpenAirInterface CN5G AMF to a patched version where Type6NasIe::Validate() properly handles 32-bit length values. Monitor AMF logs for crashes or unusual NAS Registration Requests with malformed IMEISV fields.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-117069. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...