{"id":"EUVD-2026-29350","enisaUuid":"3d3d9465-1dff-3665-80f2-05f6532ea937","description":"A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory corruption. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa. It is best practice to apply a patch to resolve this issue.","datePublished":"May 11, 2026, 11:30:13 PM","dateUpdated":"May 12, 2026, 4:46:42 PM","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","references":"https://vuldb.com/vuln/362663\nhttps://vuldb.com/vuln/362663/cti\nhttps://vuldb.com/submit/811475\nhttps://github.com/omec-project/amf/issues/672\nhttps://github.com/omec-project/amf/pull/666\nhttps://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa\nhttps://github.com/omec-project/amf/\n","aliases":"CVE-2026-8349\n","assigner":"VulDB","epss":0.31,"enisaIdProduct":[{"id":"339404b8-9599-38e5-b673-3388b878a730","product":{"name":"amf","vendor":{"name":"omec-project"}},"product_version":"2.1.1"},{"id":"60ea5383-2f0b-390f-9606-cc2bfaba854a","product":{"name":"amf","vendor":{"name":"omec-project"}},"product_version":"2.1.0"}],"enisaIdVendor":[{"id":"9417981d-b746-3200-8da8-1e7c24818c5e","vendor":{"name":"omec-project"}}],"enisaIdVulnerability":[{"id":"2a017ee8-b519-3de1-9529-c2c11e04c63f","vulnerability":{"id":"GHSA-3h63-fx68-x5fm","description":"omec-project amf crashes when processing malformed LocationReports","datePublished":"May 12, 2026, 12:31:16 AM","dateUpdated":"May 18, 2026, 5:13:35 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-8349\nhttps://github.com/omec-project/amf/issues/672\nhttps://github.com/omec-project/amf/pull/666\nhttps://github.com/omec-project/amf\nhttps://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa\nhttps://vuldb.com/submit/811475\nhttps://vuldb.com/vuln/362663\nhttps://vuldb.com/vuln/362663/cti\n","enisa_id":"EUVD-2026-29350\n","aliases":"GHSA-3h63-fx68-x5fm\nCVE-2026-8349\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"2cdf72ee-e563-347a-a526-109f562a006a","vulnerability":{"id":"CVE-2026-8349","description":"A flaw has been found in omec-project amf up to 2.1.1. This vulnerability affects unknown code of the component NGAP Message Handler. Executing a manipulation can lead to memory corruption. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa. It is best practice to apply a patch to resolve this issue.","datePublished":"May 11, 2026, 11:30:13 PM","dateUpdated":"May 12, 2026, 4:46:42 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","references":"https://vuldb.com/vuln/362663\nhttps://vuldb.com/vuln/362663/cti\nhttps://vuldb.com/submit/811475\nhttps://github.com/omec-project/amf/issues/672\nhttps://github.com/omec-project/amf/pull/666\nhttps://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa\nhttps://github.com/omec-project/amf/\n","enisa_id":"EUVD-2026-29350\n","assigner":"VulDB","epss":0.31,"dataProcessed":"Nov 3, 2026, 7:18:14 AM","vulnerabilityProduct":[{"id":"837ad4a7-55d7-33e9-9f7e-da9ce2e2ce6c","product":{"name":"amf","vendor":{"name":"omec-project"}},"product_version":"2.1.0"},{"id":"e8711d23-14b4-385d-88cb-f4cb8d621111","product":{"name":"amf","vendor":{"name":"omec-project"}},"product_version":"2.1.1"}],"vulnerabilityVendor":[{"id":"ab3881a6-a5e1-311f-9560-099f4182a95d","vendor":{"name":"omec-project"}}]}}],"enisaIdAdvisory":[]}