This vulnerability involves a memory corruption issue in the omec-project amf product, specifically in the PDUSessionResourceModifyIndication function of the handler.go source file. The flaw affects versions 2.1.0 and 2.1.1 and allows remote attackers to cause memory corruption, potentially leading to undefined behavior or denial of service. The CVSS 4.0 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Although an exploit has been published, there is no evidence of active exploitation in the wild. No official patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability can cause memory corruption remotely, which may lead to application crashes or other unintended behavior. The medium CVSS score reflects moderate impact potential. There are no confirmed reports of exploitation in operational environments at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix is documented, organizations should monitor vendor channels for updates. Until a patch is available, consider limiting network exposure of affected amf instances and applying any relevant compensating controls specific to the deployment environment.