OpenAirInterface v2.2.0 has a vulnerability where it accepts Security Mode Complete without any integrity protection. The configuration supports integrity NIA1 and NIA2, but if a user equipment (UE) sends an initial registration request with only security capability IA0, OpenAirInterface accepts and proceeds. This downgrade in security context can lead to the possibility of replay attacks. The vulnerabili [truncated]
CVE-2026-30075 is a Buffer Overflow vulnerability in OpenAirInterface Version 2.2.0. The vulnerability occurs in processing UplinkNASTransport containing Authentication Response with an oversized NAS PDU, which can cause the AUSF component to crash, leading to Denial of Services (DoS). This vulnerability can prohibit users from further registration and verification. The vulnerability has a CVSS score of 7 [truncated]
CVE-2025-65805 debrief: OpenAirInterface CN5G AMF buffer overflow vulnerability allows denial-of-service and potential code execution. The vulnerability is caused by improper handling of NAS messages, which can lead to a denial-of-service attack and potentially allow for malicious code execution. Network defenders and administrators should assess exposure and prioritize remediation efforts. The CVE record [truncated]
