Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-10114

Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was determined in Open5GS up to 2.7.7. Affected by this issue is the function handle_scp_info in the library lib/sbi/nnrf-handler.c of the component Shared NF-profile Parser. This manipulation causes out-of-bounds write. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. To fix this issue, it is recommended to deploy a patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Open5GS

  • 2.7.0affected
  • 2.7.1affected
  • 2.7.2affected
  • 2.7.3affected
  • 2.7.4affected
  • 2.7.5affected
  • 2.7.6affected
  • 2.7.7affected

References