CVE-2026-10156

Description

A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.

References

https://vuldb.com/vuln/367409/cti

https://vuldb.com/vuln/367409

https://vuldb.com/submit/818598

https://github.com/open5gs/open5gs/issues/4480

https://github.com/open5gs/open5gs/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4