CVE-2026-7183
Received Received - Intake
Uncaught Exception in UERANSIM Radio Link Simulation Layer

Publication date: 2026-04-27

Last updated on: 2026-04-27

Assigner: VulDB

Description
A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rls_pdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. It is suggested to upgrade the affected component. This behavior is related to CVE-2024-37877. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-27
Last Modified
2026-04-27
Generated
2026-05-07
AI Q&A
2026-04-28
EPSS Evaluated
2026-05-05
NVD
CVE-2026-7183
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
aligungr ueransim to 3.2.7 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-248 An exception is thrown from a function, but it is not caught.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the aligungr UERANSIM software up to version 3.2.7, specifically in the function rls::DecodeRlsMessage within the Radio Link Simulation Layer component. The issue arises from improper handling of the argument pduLength, which can cause an uncaught exception. This means that an attacker can remotely trigger this flaw, potentially causing the software to behave unexpectedly or crash.

The vulnerability has been fixed in version 3.2.8 by the vendor, who responded promptly and professionally.


How can this vulnerability impact me? :

The vulnerability can be exploited remotely to cause an uncaught exception in the affected software, which may lead to a denial of service or disruption of the Radio Link Simulation Layer functionality. This could impact the availability of the system using UERANSIM, potentially causing interruptions in service.


What immediate steps should I take to mitigate this vulnerability?

The immediate step to mitigate this vulnerability is to upgrade the affected component aligungr UERANSIM to version 3.2.8, which contains the fix for this issue.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart