CVE-2026-82587
Received Received - Intake

Memory Corruption in Open5GS 2.7.7

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulDB

Description
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_mm_context_list of the file src/amf/namf-handler.c of the component AMF. This manipulation of the argument ueContext.mmContextList[*].allowedNssai causes memory corruption. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.8.0 is able to resolve this issue. Patch name: abf8a836564b966b5141110fc25ed413c4f17522. It is recommended to upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-30
Last Modified
2026-08-30
Generated
2026-08-31
AI Q&A
2026-08-30
EPSS Evaluated
N/A
NVD
CVE-2026-82587
EUVD
EUVD-2026-68289

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
open5gs open5gs to 2.7.7 (inc)
open5gs open5gs 2.8.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a memory corruption issue in Open5GS up to version 2.7.7. It occurs in the AMF component when processing the allowedNssai field in UE context data. A maliciously crafted response with an oversized allowedNssai list causes memory corruption in the amf_namf_comm_decode_ue_mm_context_list function.

Detection Guidance

To detect this vulnerability, monitor Open5GS AMF logs for crashes or assertion failures in the amf_namf_comm_decode_ue_mm_context_list function. Check for malformed responses containing oversized allowedNssai lists in UE-context transfer requests. Use network traffic analysis tools to inspect NAMF interface messages for abnormal payload sizes.

Impact Analysis

This vulnerability allows remote attackers to crash the AMF component by sending a forged response. This can lead to denial of service, disrupting 5G network services. The attack requires the attacker to be able to send crafted responses to the AMF, potentially during UE-context transfer operations.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is a memory corruption issue in Open5GS, a 5G core network implementation. However, if exploited, it could lead to service disruption or unauthorized access, potentially impacting data integrity and availability, which are key concerns under these regulations.

Mitigation Strategies

Immediately upgrade Open5GS to version 2.8.0 or later to address the memory corruption issue. If upgrading is not immediately possible, restrict access to the NAMF interface and monitor AMF processes for crashes. Apply the patch abf8a836564b966b5141110fc25ed413c4f17522 as a temporary measure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82587. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart