Junglewise Threat Intelligence

CVE-2026-82587: Open5GS AMF memory corruption in UE MM context decoding

CVE-2026-82587 · Severity: medium · CVSS 4.3 · Published 2026-08-30

Technologies: Open5GS. Vendors: Open5GS.

Executive brief

Open5GS is an open-source implementation of 5G core network infrastructure. A memory corruption vulnerability in the AMF (Access and Mobility Function) component could allow a remote attacker to crash the service or potentially execute arbitrary code, disrupting 5G network operations and potentially affecting connected devices.

Technical details

The vulnerability is a memory corruption flaw in the amf_namf_comm_decode_ue_mm_context_list function of src/amf/namf-handler.c within the AMF component. Improper handling of the ueContext.mmContextList[*].allowedNssai argument leads to memory corruption. The vulnerability is remotely exploitable and requires no authentication; however, successful exploitation may depend on network-level access to the AMF service. An attacker can trigger a denial of service by crashing the AMF process. The issue is resolved in version 2.8.0 via commit abf8a836564b966b5141110fc25ed413c4f17522, which improves error handling in namf handlers.

Affected products

  • Open5GS Open5GS up to 2.7.7

Timeline

  • 2026-08-30: disclosed: CVE-2026-82587 published
  • 2026-05-14: patched: Patch commit abf8a836564b966b5141110fc25ed413c4f17522 authored
  • 2026-05-13: other: Patch authored

References

Related threats