This vulnerability affects the omec-project amf product, specifically the NGReset Message Handler component in versions 2.1.0 and 2.1.1. A remote attacker can manipulate this component to cause memory corruption. The CVSS 4.0 base score is 5.3, reflecting medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The exploit has been made public, increasing the risk of exploitation. However, no official patch or vendor remediation level is currently documented.

Successful exploitation can lead to memory corruption, which may cause application instability, crashes, or potentially enable further attacks depending on the corrupted memory's use. The vulnerability is remotely exploitable without authentication or user interaction, increasing exposure. However, the CVSS impact metrics indicate low confidentiality, integrity, and availability impact, suggesting limited direct damage from exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix is documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting network access to the affected component if feasible to reduce exposure.