TI-2026-23446 CVE-2026-30080 · GHSA-ppqh-5vmg-4xr4
OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.
Priority HIGH 72
OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.
Vulnerabilities
6 records
TI-2026-23442 CVE-2026-30075 · GHSA-wqfp-mq8w-2gx9
OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing…
Priority HIGH 72
OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte).
TI-2026-23445 CVE-2026-30079 · GHSA-j69j-3gv3-pwvg
In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state…
Priority MEDIUM 50
In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure.
TI-2026-23444 CVE-2026-30078 · GHSA-3cfx-9xg9-hh68
OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid…
Priority HIGH 72
OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.
TI-2025-41054 CVE-2025-66786 · GHSA-62p9-m62j-p76m
OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format…
Priority HIGH 72
OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests.
TI-2025-40453 CVE-2025-65805 · GHSA-rqwq-xmxw-556r
OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS…
Priority HIGH 72
OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages.