Threats tagged 'ghsa-7xg6-2942-h668'

OpenAirInterface Core Network version 2.2.1 contains a stack-based buffer overflow vulnerability in the UDM Nudm_UEAU Generate Authentication Data endpoint. This flaw arises because attacker-controlled input is converted into fixed-size stack buffers without proper size validation, allowing memory corruption. An unauthenticated attacker with access to the SBI interface and a valid SUPI can exploit this to overwrite stack memory, corrupt the stack canary, and cause the UDM process to terminate.