VYPR
Unrated severityNVD Advisory· Published May 23, 2026

omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption

CVE-2026-9299

Description

A flaw has been found in omec-project amf up to 2.1.1. Affected by this issue is the function PDUSessionResourceModifyIndication of the file /go/src/amf/ngap/handler.go. This manipulation causes memory corruption. Remote exploitation of the attack is possible. The exploit has been published and may be used. Applying a patch is the recommended action to fix this issue.

Affected products

2
  • Free5gc/Amfinferred2 versions
    <=2.1.1+ 1 more
    • (no CPE)range: <=2.1.1
    • (no CPE)range: <=2.1.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.