Threats tagged 'ghsa-6384-rh84-ww6f'

An integer underflow vulnerability exists in the NAS decoder of OpenAirInterface CN5G AMF version 2.2.1. This flaw allows an unauthenticated remote attacker to cause a denial of service by sending crafted NAS Registration Requests with a truncated SUCI in the 5GS Mobile Identity IE. The vulnerability arises from insufficient length validation in the DecodeSuci() function, leading to an out-of-bounds heap read and subsequent crash of the AMF process.