PatchSiren

aligungr CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM aligungr CVE published 2026-09-28

CVE-2026-101035

A flaw in aligungr UERANSIM up to 3.3.0 can cause an uncaught exception when DecodePlainMmMessage is manipulated. This issue, located in src/lib/nas/encode.cpp of the nr-gnb component, can be exploited remotely. A patch (1ae9bf2062b57595dbcbc4bc1d0a0ccf06815bac) is available to resolve this issue. The vulnerability can be exploited remotely, leading to an uncaught exception. Exposure assessment and monito [truncated]

MEDIUM aligungr CVE published 2026-09-28

CVE-2026-100892

A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affects the function ULInformationTransfer of the file src/gnb/rrc/handler.cpp of the component nr-gnb. Performing a manipulation of the argument dedicatedNASMessage results in memory corruption. The attack can be initiated remotely. The vulnerability affects remote access systems and UERANSIM implementations. Defenders should assess exposur [truncated]

MEDIUM aligungr CVE published 2026-04-27

CVE-2026-7183

A vulnerability was found in aligungr UERANSIM up to 3.2.7, affecting the function rls::DecodeRlsMessage in src/lib/rls/rls_pdu.cpp. The manipulation of pduLength leads to an uncaught exception. The attack may be initiated remotely. Upgrading to version 3.2.8 is sufficient to fix this issue. The identifier of the patch is ca1a66fffe282767bb08618af9f848e3b68ea47b. This MEDIUM severity vulnerability has a C [truncated]