Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-15720

Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler

Description

In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

open5gs open5gs

Default version status: unaffected

  • 0 to ≤ 2.7.7affected

References