This vulnerability in O-RAN-SC SMO OAM 2025-06-10 affects an unknown function within the VES Collector component. An attacker can manipulate the additionalFields.padding argument to trigger uncontrolled memory allocation, potentially leading to denial of service or other impacts. The flaw is remotely exploitable without requiring user interaction or elevated privileges. The issue was reported early to the project but remains unaddressed, and exploit details have been publicly disclosed.

The vulnerability allows remote attackers to cause uncontrolled memory allocation in the affected component, which may lead to denial of service or resource exhaustion. The CVSS 4.0 base score is 5.3 (medium severity), reflecting the network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on confidentiality, integrity, and availability.

No official patch or remediation has been announced by the vendor. Since the project has not responded yet, users should monitor for vendor advisories and apply any future updates promptly. In the meantime, consider restricting network access to the affected component to trusted sources to reduce exposure.