Openairinterface - vulnerabilities (CVEs)
12 CVEs in 5 products, 0 in the last 30 days, newest from 2026-06-01.
Products
- Oai-cn5g-amf - 6 CVEs
- Cn5g Amf - 2 CVEs
- Openairinterface5g - 2 CVEs
- Magma - 1 CVEs
- Openairinterface - 1 CVEs
Newest CVEs of Openairinterface
- CVE-2026-37232 - CVSS 8.6 (high), 2026-06-01: An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization metric calculation. The functions…
- CVE-2026-30075 - CVSS 7.5 (high), 2026-04-08: OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU…
- CVE-2026-30080 - CVSS 7.5 (high), 2026-04-08: OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE…
- CVE-2026-30079 - CVSS 9.8 (critical), 2026-04-07: In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be…
- CVE-2026-30078 - CVSS 7.5 (high), 2026-04-06: OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message…
- CVE-2026-30077 - CVSS 7.5 (high), 2026-03-30: OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular…
- CVE-2025-66786 - CVSS 7.5 (high), 2026-01-07: OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to…
- CVE-2025-65805 - CVSS 7.5 (high), 2026-01-07: OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service…
- CVE-2025-26265 - CVSS 6.5 (medium), 2025-03-27: A segmentation fault in openairinterface5g v2.1.0 allows attackers to cause a Denial of Service (DoS) via a crafted UE Context Modification response.
- CVE-2024-24446 - CVSS 6.5 (medium), 2024-11-15: An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted…
- CVE-2024-24426 - CVSS 7.5 (high), 2024-11-15: Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a…
- CVE-2024-24449 - CVSS 6.5 (medium), 2024-11-15: An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service…
