Executive brief
Open5GS is an open-source implementation of 5G core network infrastructure. A memory corruption vulnerability in the AMF (Access and Mobility Function) component could allow a remote attacker to crash the service or potentially execute arbitrary code, disrupting 5G network operations and potentially affecting connected devices.
Technical details
The vulnerability is a memory corruption flaw in the amf_namf_comm_decode_ue_mm_context_list function of src/amf/namf-handler.c within the AMF component. Improper handling of the ueContext.mmContextList[*].allowedNssai argument leads to memory corruption. The vulnerability is remotely exploitable and requires no authentication; however, successful exploitation may depend on network-level access to the AMF service. An attacker can trigger a denial of service by crashing the AMF process. The issue is resolved in version 2.8.0 via commit abf8a836564b966b5141110fc25ed413c4f17522, which improves error handling in namf handlers.
Affected products
- Open5GS Open5GS up to 2.7.7
Timeline
- 2026-08-30: disclosed: CVE-2026-82587 published
- 2026-05-14: patched: Patch commit abf8a836564b966b5141110fc25ed413c4f17522 authored
- 2026-05-13: other: Patch authored