Is CVE-2026-30075 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-30075 being exploited in the wild.

How severe is CVE-2026-30075?

High severity, with a CVSS score of 7.5, published 8 April 2026.

Is there a fix for CVE-2026-30075?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-30075 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-30075?

Check whether you run Openairinterface AUSF or Openairinterface Oai-Cn5g-Amf at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-30075: OpenAirInterface AUSF buffer overflow in UplinkNASTransport processing

CVE-2026-30075 · Severity: high · CVSS 7.5 · Published 2026-04-08

OpenAirInterface, an open-source software platform for 5G wireless networks, contains a flaw in how it handles mobile device authentication. An attacker can send a specially crafted, oversized authentication message that causes the core network's authentication service to crash. This results in a denial-of-service, preventing new users from registering or connecting to the cellular network.

Technologies: Openairinterface Oai-Cn5g-Amf. Vendors: Openairinterface.

Quick answers

Is CVE-2026-30075 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-30075 being exploited in the wild.
How severe is CVE-2026-30075?: High severity, with a CVSS score of 7.5, published 8 April 2026.
Which products and versions are affected?: Openairinterface AUSF 2.2.0.
Is there a fix for CVE-2026-30075?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-30075 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-30075?: Check whether you run Openairinterface AUSF or Openairinterface Oai-Cn5g-Amf at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A classic buffer overflow (CWE-120) exists in OpenAirInterface Version 2.2.0 within the Authentication Server Function (AUSF) component. The vulnerability is triggered when the Access and Mobility Management Function (AMF) decodes an UplinkNASTransport message containing a NAS PDU with an oversized authentication response (e.g., 100 bytes) and passes it to the AUSF for verification. The AUSF fails to perform adequate bounds checking on the 'resStar' field, leading to a memory corruption and service crash. An attacker can exploit this over the network without authentication to cause a Denial of Service (DoS), preventing legitimate users from completing the registration and verification process. At the time of reporting, the issue was identified in the oai-cn5g-ausf repository.

Affected products

OpenAirInterface OpenAirInterface AUSF 2.2.0
OpenAirInterface OpenAirInterface AMF 2.2.0

Timeline

2026-04-08: disclosed: Initial disclosure of CVE-2026-30075
2026-04-08: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.