CVE-2026-30075Disclosure(openairinterface / oai-cn5g-amf)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and passed to the AUSF component for verification. AUSF crashes on receiving this oversize response. This can prohibit users from further registration and verification and can cause Denial of Services (DoS).

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • oai-cn5g-amf

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-04-13)
  • 3 total mentions across 2 days

Affected systems

Products
oai-cn5g-amf

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-08: 1Mentions · 2026-04-13: 2Technical Details · 2026-04-13: 204-0804-13
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-081
General1
2026-04-132
Disclosure2
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-30075 Buffer Overflow Denial of Service in OpenAirInterface 2.2.0 AUSF Component https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30075

    Post summary

    The post merely announces CVE-2026-30075 with a generic description and a link, lacking any actionable details or evidence of exploitation.

    0000193
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-30075 OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with overs… https://www.cve.org/CVERecord?id=CVE-2026-30075 ----- Traducción: CVE-2026-30075 Ope… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑30075, a buffer‑overflow flaw in OpenAirInterface 2.2.0, and links to the CVE record; no PoC, exploit, or mitigation details are provided.

    0000029
    71 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-30075 OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with overs… https://www.cve.org/CVERecord?id=CVE-2026-30075

    Post summary

    The statement announces a buffer‑overflow flaw in OpenAirInterface v2.2.0, providing basic technical details but no PoC, exploit code, active use, or patch information.

    00000370
    57.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenairinterfaceoai-cn5g-amf2.2.0--

Explore more