CVE-2026-30075: n/a
OpenAirInterface Version 2. 2. 0 contains a buffer overflow vulnerability triggered by processing an oversize Authentication Response within an UplinkNASTransport message. This vulnerability causes the AUSF component to crash, resulting in denial of service by preventing further user registration and verification. The vulnerability has a high severity score of 7. 5 and does not impact confidentiality or integrity but causes availability disruption.
AI Analysis
Technical Summary
CVE-2026-30075 describes a buffer overflow in OpenAirInterface 2.2.0 when handling UplinkNASTransport messages containing an Authentication Response with an oversized NAS PDU (e.g., 100 bytes). The AMF decodes this response and passes it to the AUSF component, which crashes upon receiving the oversized data. This crash leads to denial of service by blocking user registration and verification processes. The vulnerability is classified under CWE-120 (buffer overflow). No patch or official remediation is currently documented, and no known exploits are reported in the wild.
Potential Impact
The vulnerability causes a denial of service condition by crashing the AUSF component during processing of oversized authentication responses. This prevents users from completing registration and verification, impacting service availability. There is no impact on confidentiality or integrity according to the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing input validation or size checks on UplinkNASTransport messages to prevent oversized Authentication Responses from reaching the AUSF component.
CVE-2026-30075: n/a
Description
OpenAirInterface Version 2. 2. 0 contains a buffer overflow vulnerability triggered by processing an oversize Authentication Response within an UplinkNASTransport message. This vulnerability causes the AUSF component to crash, resulting in denial of service by preventing further user registration and verification. The vulnerability has a high severity score of 7. 5 and does not impact confidentiality or integrity but causes availability disruption.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-30075 describes a buffer overflow in OpenAirInterface 2.2.0 when handling UplinkNASTransport messages containing an Authentication Response with an oversized NAS PDU (e.g., 100 bytes). The AMF decodes this response and passes it to the AUSF component, which crashes upon receiving the oversized data. This crash leads to denial of service by blocking user registration and verification processes. The vulnerability is classified under CWE-120 (buffer overflow). No patch or official remediation is currently documented, and no known exploits are reported in the wild.
Potential Impact
The vulnerability causes a denial of service condition by crashing the AUSF component during processing of oversized authentication responses. This prevents users from completing registration and verification, impacting service availability. There is no impact on confidentiality or integrity according to the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing input validation or size checks on UplinkNASTransport messages to prevent oversized Authentication Responses from reaching the AUSF component.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-03-04T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d737031cc7ad14da4194cf
Added to database: 4/9/2026, 5:20:03 AM
Last enriched: 4/16/2026, 12:11:00 PM
Last updated: 5/25/2026, 12:19:51 PM
Views: 61
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.